From null at suse.de Thu Oct 1 12:31:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 12:31:02 -0000 Subject: SUSE-SU-2026:4409-1: important: Security update for gimp Message-ID: <179085786249.22608.9399915642803042190@c47cdf24d69a> # Security update for gimp Announcement ID: SUSE-SU-2026:4409-1 Release Date: 2026-10-01T07:07:36Z Rating: important References: * bsc#1276230 * bsc#1276231 * bsc#1276232 * bsc#1276233 * bsc#1276234 * bsc#1276235 * bsc#1276236 * bsc#1280511 * bsc#1280512 * bsc#1280739 Cross-References: * CVE-2026-18301 * CVE-2026-18302 * CVE-2026-18303 * CVE-2026-18304 * CVE-2026-18305 * CVE-2026-18306 * CVE-2026-18307 * CVE-2026-90947 * CVE-2026-90948 * CVE-2026-92248 CVSS scores: * CVE-2026-18301 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18301 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18302 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18302 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18303 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18303 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18304 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18304 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18305 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18305 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18306 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18306 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18307 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-18307 ( NVD ): 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90947 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90947 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90948 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90948 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-90948 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-92248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92248 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for gimp fixes the following issues: * CVE-2026-18301: Vulnerability Report at read_channel_data (bsc#1276230). * CVE-2026-18302: TIF File Parsing Heap-based Buffer Overflow (bsc#1276231). * CVE-2026-18303: TIF File Parsing Stack-based Buffer Overflow (bsc#1276232). * CVE-2026-18304: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276233). * CVE-2026-18305: TIF File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276234). * CVE-2026-18306: SGI File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1276235). * CVE-2026-18307: File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1276236). * CVE-2026-90947: out-of-bounds write in the lighting effects plugin when processing a crafted preset file due to improper validation of the number of light sources (bsc#1280511). * CVE-2026-90948: heap buffer overflow in the ICO loader when processing ICO files with embedded PNG images due to an integer overflow during calculation of buffer sizes (bsc#1280512). * CVE-2026-92248: integer overflow when generating a thumbnail preview for a PSD file can lead to a heap buffer overflow (bsc#1280739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4409 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4409 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4409 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-devel-2.10.30-150400.3.79.1 * gimp-plugin-aa-2.10.30-150400.3.79.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (x86_64) * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.79.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.79.1 * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-32bit-2.10.30-150400.3.79.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-64bit-2.10.30-150400.3.79.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-devel-2.10.30-150400.3.79.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * libgimp-2_0-0-debuginfo-2.10.30-150400.3.79.1 * gimp-debuginfo-2.10.30-150400.3.79.1 * gimp-debugsource-2.10.30-150400.3.79.1 * libgimpui-2_0-0-2.10.30-150400.3.79.1 * libgimp-2_0-0-2.10.30-150400.3.79.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-devel-2.10.30-150400.3.79.1 * gimp-plugin-aa-2.10.30-150400.3.79.1 * gimp-2.10.30-150400.3.79.1 * gimp-devel-debuginfo-2.10.30-150400.3.79.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.79.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.79.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18301.html * https://www.suse.com/security/cve/CVE-2026-18302.html * https://www.suse.com/security/cve/CVE-2026-18303.html * https://www.suse.com/security/cve/CVE-2026-18304.html * https://www.suse.com/security/cve/CVE-2026-18305.html * https://www.suse.com/security/cve/CVE-2026-18306.html * https://www.suse.com/security/cve/CVE-2026-18307.html * https://www.suse.com/security/cve/CVE-2026-90947.html * https://www.suse.com/security/cve/CVE-2026-90948.html * https://www.suse.com/security/cve/CVE-2026-92248.html * https://bugzilla.suse.com/show_bug.cgi?id=1276230 * https://bugzilla.suse.com/show_bug.cgi?id=1276231 * https://bugzilla.suse.com/show_bug.cgi?id=1276232 * https://bugzilla.suse.com/show_bug.cgi?id=1276233 * https://bugzilla.suse.com/show_bug.cgi?id=1276234 * https://bugzilla.suse.com/show_bug.cgi?id=1276235 * https://bugzilla.suse.com/show_bug.cgi?id=1276236 * https://bugzilla.suse.com/show_bug.cgi?id=1280511 * https://bugzilla.suse.com/show_bug.cgi?id=1280512 * https://bugzilla.suse.com/show_bug.cgi?id=1280739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 12:32:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 12:32:19 -0000 Subject: SUSE-SU-2026:4408-1: important: Security update for alloy Message-ID: <179085793977.22608.16046486117077479614@c47cdf24d69a> # Security update for alloy Announcement ID: SUSE-SU-2026:4408-1 Release Date: 2026-10-01T07:07:12Z Rating: important References: * bsc#1267482 * bsc#1267483 * bsc#1267484 * bsc#1267486 * bsc#1267487 * bsc#1268982 * bsc#1269861 * bsc#1272028 * bsc#1272418 * bsc#1276742 * bsc#1276982 * bsc#1276992 * bsc#1277429 * bsc#1277996 * bsc#1278671 * bsc#1278693 * bsc#1280671 Cross-References: * CVE-2026-2303 * CVE-2026-37236 * CVE-2026-41178 * CVE-2026-45679 * CVE-2026-45680 * CVE-2026-45681 * CVE-2026-45683 * CVE-2026-45684 * CVE-2026-46600 * CVE-2026-48496 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-75889 * CVE-2026-78662 * CVE-2026-81521 * CVE-2026-89090 CVSS scores: * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-37236 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-37236 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-37236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45679 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-45679 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45679 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45680 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45680 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45681 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( NVD ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2026-45684 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45684 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-46600 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46600 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-75889 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-75889 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-75889 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81521 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-81521 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81521 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for alloy fixes the following issues: * CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of- Bounds Read in GSSAPI Error Handling (bsc#1269861). * CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method- Override header and bypass established access control (bsc#1277996). * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276742). * CVE-2026-45679: go.opentelemetry.io/obi: Redis error text is exported in span status messages and can lead to exfiltration of sensitive data (bsc#1267482). * CVE-2026-45680: go.opentelemetry.io/obi: unbounded BPF internal metrics replay can exhaust CPU and cause a DoS (bsc#1267483). * CVE-2026-45681: go.opentelemetry.io/obi: CPU-mismatch fallback uses 256-byte buffer with 8KB size and can cause OBI out-of-bounds reads to leak memory into telemetry (bsc#1267484). * CVE-2026-45683: go.opentelemetry.io/obi: Java TLS ioctl kprobe allows a user to point OBI at kernel memory and cause that memory to be copied into telemetry (bsc#1267486). * CVE-2026-45684: go.opentelemetry.io/obi: log enricher mishandled `writev` buffers and allows multi-segment calls to read and overwrite memory beyond the first segment (bsc#1267487). * CVE-2026-46600: golang.org/x/net/dns/dnsmessage: Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer (bsc#1272418). * CVE-2026-48496: opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent (bsc#1268982). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272028). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278671). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276982). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276992). * CVE-2026-75889: arbitrary file reads due to the `prometheus.operator.servicemonitors` component allowing users who can modify `ServiceMonitor` resources in a watched namespace to specify an arbitrary local file through `bearerTokenFile` (bsc#1277429). * CVE-2026-81521: go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (bsc#1278693). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280671). Changes for alloy: * Update to version 1.19.2. * Update to version 1.19.1. * Update to version 1.19.0: * BREAKING CHANGE: prometheus.operator.servicemonitors now rejects endpoints that reference local files by default. Set allow_arbitrary_file_access = true to preserve previous behavior. * prometheus.enrich: Support multi-label matching * prometheus.relabel: Add opt-in TTL cache mode * telemetry: Add new metrics for graph connections and pyroscope forwarded entries * database_observability: Exclude system schemas from MySQL health checks and redact query text in explain_plans * Update to version 1.18.1: * Add nop receiver to OTel Engine ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4408 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * alloy-debuginfo-1.19.2-150700.15.29.1 * alloy-1.19.2-150700.15.29.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-37236.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-45679.html * https://www.suse.com/security/cve/CVE-2026-45680.html * https://www.suse.com/security/cve/CVE-2026-45681.html * https://www.suse.com/security/cve/CVE-2026-45683.html * https://www.suse.com/security/cve/CVE-2026-45684.html * https://www.suse.com/security/cve/CVE-2026-46600.html * https://www.suse.com/security/cve/CVE-2026-48496.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-75889.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81521.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1267482 * https://bugzilla.suse.com/show_bug.cgi?id=1267483 * https://bugzilla.suse.com/show_bug.cgi?id=1267484 * https://bugzilla.suse.com/show_bug.cgi?id=1267486 * https://bugzilla.suse.com/show_bug.cgi?id=1267487 * https://bugzilla.suse.com/show_bug.cgi?id=1268982 * https://bugzilla.suse.com/show_bug.cgi?id=1269861 * https://bugzilla.suse.com/show_bug.cgi?id=1272028 * https://bugzilla.suse.com/show_bug.cgi?id=1272418 * https://bugzilla.suse.com/show_bug.cgi?id=1276742 * https://bugzilla.suse.com/show_bug.cgi?id=1276982 * https://bugzilla.suse.com/show_bug.cgi?id=1276992 * https://bugzilla.suse.com/show_bug.cgi?id=1277429 * https://bugzilla.suse.com/show_bug.cgi?id=1277996 * https://bugzilla.suse.com/show_bug.cgi?id=1278671 * https://bugzilla.suse.com/show_bug.cgi?id=1278693 * https://bugzilla.suse.com/show_bug.cgi?id=1280671 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:30:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:30:44 -0000 Subject: SUSE-SU-2026:23968-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179087224425.12922.14257852280620699563@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23968-1 Release Date: 2026-09-29T19:46:32Z Rating: important References: * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1787 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:31:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:31:30 -0000 Subject: SUSE-SU-2026:23967-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179087229017.12922.14236803149355214758@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23967-1 Release Date: 2026-09-29T16:11:29Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1780 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:32:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:32:15 -0000 Subject: SUSE-SU-2026:23966-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179087233553.12922.5799328362814692484@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23966-1 Release Date: 2026-09-29T14:48:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1777 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:33:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:33:10 -0000 Subject: SUSE-SU-2026:23965-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179087239097.12922.2305991412655777496@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23965-1 Release Date: 2026-09-29T14:33:00Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1776 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:33:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:33:57 -0000 Subject: SUSE-SU-2026:23964-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179087243706.12922.17569538274152609562@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23964-1 Release Date: 2026-09-29T14:07:25Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1775 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:34:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:34:42 -0000 Subject: SUSE-SU-2026:23963-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179087248253.12922.11739891353512180452@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23963-1 Release Date: 2026-09-29T14:07:25Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1774 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:35:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:35:32 -0000 Subject: SUSE-SU-2026:23962-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179087253218.12922.10737436946413854526@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23962-1 Release Date: 2026-09-29T13:13:08Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1773 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:36:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:36:13 -0000 Subject: SUSE-SU-2026:23961-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179087257309.12922.16908243521647608959@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23961-1 Release Date: 2026-09-29T13:13:08Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1772 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:36:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:36:59 -0000 Subject: SUSE-SU-2026:23960-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179087261941.12922.16365759077372252350@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23960-1 Release Date: 2026-09-29T12:42:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1771 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:37:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:37:38 -0000 Subject: SUSE-SU-2026:23959-1: important: Security update for rpcbind Message-ID: <179087265808.12922.9460509546065108123@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:23959-1 Release Date: 2026-09-29T16:14:19Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1784 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:38:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:38:48 -0000 Subject: SUSE-SU-2026:23957-1: important: Security update for glibc Message-ID: <179087272883.12922.3403929784374264306@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23957-1 Release Date: 2026-09-29T12:13:52Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1769 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * glibc-devel-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-locale-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:40:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:40:59 -0000 Subject: SUSE-SU-2026:23952-1: important: Security update for perl-DBI Message-ID: <179087285972.12922.14651504953124226101@e7f4ad8d9866> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:23952-1 Release Date: 2026-09-25T07:38:28Z Rating: important References: * bsc#1281704 Cross-References: * CVE-2026-78030 CVSS scores: * CVE-2026-78030 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78030 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78030 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for perl-DBI fixes the following issue: * CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1761 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * perl-DBI-1.647.0-160000.6.1 * perl-DBI-debugsource-1.647.0-160000.6.1 * perl-DBI-debuginfo-1.647.0-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78030.html * https://bugzilla.suse.com/show_bug.cgi?id=1281704 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:41:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:41:43 -0000 Subject: SUSE-SU-2026:23951-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179087290332.12922.4819686808296686322@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23951-1 Release Date: 2026-09-29T19:40:12Z Rating: important References: * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1787 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1787 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:42:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:42:22 -0000 Subject: SUSE-SU-2026:23950-1: moderate: Security update for gnome-shell Message-ID: <179087294216.12922.16851312539146322357@e7f4ad8d9866> # Security update for gnome-shell Announcement ID: SUSE-SU-2026:23950-1 Release Date: 2026-09-29T17:39:58Z Rating: moderate References: * bsc#1280619 Cross-References: * CVE-2026-91786 CVSS scores: * CVE-2026-91786 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91786 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-91786 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for gnome-shell fixes the following issue: * CVE-2026-91786: missing dimension validation when processing icons from a remote search provider via D-Bus can lead to an out-of-bounds read (bsc#1280619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1786 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1786 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * gnome-shell-devel-48.4-160000.2.1 * gnome-shell-debuginfo-48.4-160000.2.1 * gnome-shell-48.4-160000.2.1 * gnome-extensions-48.4-160000.2.1 * gnome-shell-debugsource-48.4-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * gnome-shell-lang-48.4-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * gnome-shell-devel-48.4-160000.2.1 * gnome-shell-debuginfo-48.4-160000.2.1 * gnome-shell-48.4-160000.2.1 * gnome-extensions-48.4-160000.2.1 * gnome-shell-debugsource-48.4-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * gnome-shell-lang-48.4-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-91786.html * https://bugzilla.suse.com/show_bug.cgi?id=1280619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:43:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:43:00 -0000 Subject: SUSE-SU-2026:23949-1: important: Security update for emacs Message-ID: <179087298085.12922.1498950126208572952@e7f4ad8d9866> # Security update for emacs Announcement ID: SUSE-SU-2026:23949-1 Release Date: 2026-09-29T17:24:16Z Rating: important References: * bsc#1282390 Cross-References: * CVE-2026-96442 CVSS scores: * CVE-2026-96442 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96442 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96442 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issue: * CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode (bsc#1282390). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1783 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1783 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * emacs-nox-debuginfo-30.2-160000.4.1 * emacs-nox-30.2-160000.4.1 * etags-debuginfo-30.2-160000.4.1 * emacs-debuginfo-30.2-160000.4.1 * emacs-x11-30.2-160000.4.1 * emacs-30.2-160000.4.1 * etags-30.2-160000.4.1 * emacs-x11-debuginfo-30.2-160000.4.1 * emacs-eln-30.2-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * emacs-info-30.2-160000.4.1 * emacs-el-30.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-30.2-160000.4.1 * emacs-nox-30.2-160000.4.1 * etags-debuginfo-30.2-160000.4.1 * emacs-debuginfo-30.2-160000.4.1 * emacs-x11-30.2-160000.4.1 * emacs-30.2-160000.4.1 * etags-30.2-160000.4.1 * emacs-x11-debuginfo-30.2-160000.4.1 * emacs-eln-30.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * emacs-info-30.2-160000.4.1 * emacs-el-30.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96442.html * https://bugzilla.suse.com/show_bug.cgi?id=1282390 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:43:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:43:48 -0000 Subject: SUSE-SU-2026:23948-1: important: Security update for ImageMagick Message-ID: <179087302804.12922.15128986769952430964@e7f4ad8d9866> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:23948-1 Release Date: 2026-09-29T16:58:54Z Rating: important References: * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1281913 Cross-References: * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 * CVE-2026-93590 CVSS scores: * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93590 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93590 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93590 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93590 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-93590: failure to perform policy checks during buffer allocation for image pixels in the UHDR encoder can lead to denial of service (bsc#1281913). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1782 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1782 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libMagickCore-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-7.1.2.0-160000.16.1 * perl-PerlMagick-7.1.2.0-160000.16.1 * ImageMagick-extra-7.1.2.0-160000.16.1 * ImageMagick-debugsource-7.1.2.0-160000.16.1 * ImageMagick-extra-debuginfo-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.2.0-160000.16.1 * libMagick++-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * perl-PerlMagick-debuginfo-7.1.2.0-160000.16.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * ImageMagick-debuginfo-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ImageMagick-doc-7.1.2.0-160000.16.1 * ImageMagick-config-7-SUSE-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-secure-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-open-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-limited-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libMagickCore-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-7.1.2.0-160000.16.1 * perl-PerlMagick-7.1.2.0-160000.16.1 * ImageMagick-extra-7.1.2.0-160000.16.1 * ImageMagick-debugsource-7.1.2.0-160000.16.1 * ImageMagick-extra-debuginfo-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-7.1.2.0-160000.16.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.2.0-160000.16.1 * libMagick++-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-7.1.2.0-160000.16.1 * ImageMagick-devel-7.1.2.0-160000.16.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * perl-PerlMagick-debuginfo-7.1.2.0-160000.16.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.2.0-160000.16.1 * ImageMagick-debuginfo-7.1.2.0-160000.16.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ImageMagick-doc-7.1.2.0-160000.16.1 * ImageMagick-config-7-SUSE-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-websafe-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-secure-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-open-7.1.2.0-160000.16.1 * ImageMagick-config-7-upstream-limited-7.1.2.0-160000.16.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://www.suse.com/security/cve/CVE-2026-93590.html * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1281913 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:44:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:44:50 -0000 Subject: SUSE-SU-2026:23946-1: important: Security update for rpcbind Message-ID: <179087309009.12922.16868486262679860971@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:23946-1 Release Date: 2026-09-29T16:14:34Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1784 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1784 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-160000.3.1 * rpcbind-debugsource-1.2.9-160000.3.1 * rpcbind-debuginfo-1.2.9-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:45:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:45:28 -0000 Subject: SUSE-SU-2026:23945-1: important: Security update for perl-Protocol-HTTP2 Message-ID: <179087312868.12922.10556441929251515157@e7f4ad8d9866> # Security update for perl-Protocol-HTTP2 Announcement ID: SUSE-SU-2026:23945-1 Release Date: 2026-09-29T16:11:16Z Rating: important References: * bsc#1279629 Cross-References: * CVE-2026-16028 CVSS scores: * CVE-2026-16028 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-16028 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-16028 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for perl-Protocol-HTTP2 fixes the following issue: * CVE-2026-16028: memory exhaustion leading to denial of service due to closed streams never being removed by `stream_state` from the connection stream table (bsc#1279629). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1781 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1781 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * perl-Protocol-HTTP2-1.10-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * perl-Protocol-HTTP2-1.10-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16028.html * https://bugzilla.suse.com/show_bug.cgi?id=1279629 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:46:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:46:14 -0000 Subject: SUSE-SU-2026:23944-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179087317480.12922.2261257085497359365@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23944-1 Release Date: 2026-09-29T16:11:16Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1780 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1780 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:46:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:46:54 -0000 Subject: SUSE-SU-2026:23943-1: moderate: Security update for php-composer2 Message-ID: <179087321491.12922.17077353356417358582@e7f4ad8d9866> # Security update for php-composer2 Announcement ID: SUSE-SU-2026:23943-1 Release Date: 2026-09-29T14:57:30Z Rating: moderate References: * bsc#1279898 * bsc#1280019 Cross-References: * CVE-2026-45793 * CVE-2026-59944 * CVE-2026-59947 CVSS scores: * CVE-2026-45793 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-45793 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59944 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59944 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59944 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59947 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59947 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59947 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2026-59944: path traversal and link following issue can make files world readable and executable (bsc#1279898). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1778 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1778 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php-composer2-2.8.9-160000.6.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php-composer2-2.8.9-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-45793.html * https://www.suse.com/security/cve/CVE-2026-59944.html * https://www.suse.com/security/cve/CVE-2026-59947.html * https://bugzilla.suse.com/show_bug.cgi?id=1279898 * https://bugzilla.suse.com/show_bug.cgi?id=1280019 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:47:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:47:40 -0000 Subject: SUSE-SU-2026:23942-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179087326038.12922.925552551314356256@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23942-1 Release Date: 2026-09-29T14:57:30Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1777 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1777 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:48:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:48:26 -0000 Subject: SUSE-SU-2026:23941-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179087330697.12922.3480671717504324046@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23941-1 Release Date: 2026-09-29T14:38:24Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1776 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1776 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:49:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:49:57 -0000 Subject: SUSE-SU-2026:23939-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179087339783.12922.11288296285584568256@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23939-1 Release Date: 2026-09-29T14:20:34Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1774 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1774 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:49:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:49:12 -0000 Subject: SUSE-SU-2026:23940-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179087335209.12922.11342480189960683005@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23940-1 Release Date: 2026-09-29T14:20:34Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1775 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1775 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:50:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:50:42 -0000 Subject: SUSE-SU-2026:23938-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179087344299.12922.11381884255233329903@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23938-1 Release Date: 2026-09-29T13:12:03Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1772 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1772 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:51:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:51:29 -0000 Subject: SUSE-SU-2026:23937-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179087348924.12922.12341615280138439252@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23937-1 Release Date: 2026-09-29T13:09:45Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1773 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1773 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:52:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:52:14 -0000 Subject: SUSE-SU-2026:23936-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179087353486.12922.5505421212773681654@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23936-1 Release Date: 2026-09-29T12:48:41Z Rating: important References: * bsc#1267388 * bsc#1270303 * bsc#1273232 * bsc#1274074 * bsc#1274942 * bsc#1275458 Cross-References: * CVE-2026-46150 * CVE-2026-53360 * CVE-2026-64423 * CVE-2026-64561 * CVE-2026-64564 * CVE-2026-68138 CVSS scores: * CVE-2026-46150 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-46150 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-46150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-53360 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53360 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53360 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64561 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-64561 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64561 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64564 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46150: fanotify: fix false positive on permission events (bsc#1267388). * CVE-2026-53360: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (bsc#1270303). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1275458). * CVE-2026-64561: KVM: x86: Check for invalid/obsolete root _after_ making MMU pages available (Zapscape) (bsc#1273232). * CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (SCTPhantom) (bsc#1274074). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274942). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1771 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1771 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-18-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-18-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46150.html * https://www.suse.com/security/cve/CVE-2026-53360.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64561.html * https://www.suse.com/security/cve/CVE-2026-64564.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://bugzilla.suse.com/show_bug.cgi?id=1267388 * https://bugzilla.suse.com/show_bug.cgi?id=1270303 * https://bugzilla.suse.com/show_bug.cgi?id=1273232 * https://bugzilla.suse.com/show_bug.cgi?id=1274074 * https://bugzilla.suse.com/show_bug.cgi?id=1274942 * https://bugzilla.suse.com/show_bug.cgi?id=1275458 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:53:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:53:26 -0000 Subject: SUSE-SU-2026:23934-1: important: Security update for glibc Message-ID: <179087360679.12922.16210019205595505557@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23934-1 Release Date: 2026-09-29T11:23:34Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1769 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1769 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * glibc-locale-2.40-160000.7.1 * glibc-utils-2.40-160000.7.1 * glibc-extra-debuginfo-2.40-160000.7.1 * glibc-devel-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-utils-src-debugsource-2.40-160000.7.1 * glibc-profile-2.40-160000.7.1 * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-devel-static-2.40-160000.7.1 * glibc-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * glibc-utils-debuginfo-2.40-160000.7.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * glibc-html-2.40-160000.7.1 * glibc-i18ndata-2.40-160000.7.1 * glibc-lang-2.40-160000.7.1 * glibc-info-2.40-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.40-160000.7.1 * glibc-utils-2.40-160000.7.1 * glibc-extra-debuginfo-2.40-160000.7.1 * glibc-devel-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 * glibc-2.40-160000.7.1 * glibc-devel-debuginfo-2.40-160000.7.1 * glibc-utils-src-debugsource-2.40-160000.7.1 * glibc-profile-2.40-160000.7.1 * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-devel-static-2.40-160000.7.1 * glibc-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-locale-base-2.40-160000.7.1 * glibc-utils-debuginfo-2.40-160000.7.1 * SUSE Linux Enterprise Server 16.0 (noarch) * glibc-html-2.40-160000.7.1 * glibc-i18ndata-2.40-160000.7.1 * glibc-lang-2.40-160000.7.1 * glibc-info-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 16:55:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 16:55:48 -0000 Subject: SUSE-SU-2026:23929-1: important: Security update for glibc Message-ID: <179087374824.12922.15210434335719617379@e7f4ad8d9866> # Security update for glibc Announcement ID: SUSE-SU-2026:23929-1 Release Date: 2026-09-29T12:22:22Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276892 * bsc#1276946 * bsc#1277247 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1281297 * bsc#1282509 Cross-References: * CVE-2026-18374 * CVE-2026-19499 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19499 ( SUSE ): 4.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19499 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H * CVE-2026-19499 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves nine vulnerabilities and has one fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: invalid free via wordexp WRDE_APPEND rollback (bsc#1274726). * CVE-2026-6791: stack overflow in wordexp tilde expansion (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: heap buffer overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19499: buffer overflow in strfmon right-justification padding (bsc#1276892). * CVE-2026-19542: out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: SHIFT_JISX0213 decoding lacks pending character reset (bsc#1277921). * CVE-2026-80489: EUC_JISX0213 decoding lacks pending character reset (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). Other changes: * Add -flive-patching=inline-clone to avoid untraceable inter-procedural optimizations (bsc#1277247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1769 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * glibc-gconv-modules-extra-debuginfo-2.40-160000.7.1 * glibc-gconv-modules-extra-2.40-160000.7.1 * glibc-debuginfo-2.40-160000.7.1 * glibc-debugsource-2.40-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19499.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276892 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277247 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 20:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:4411-1: moderate: Security update for python Message-ID: <179088664296.13136.10024827606141038634@32be4de442c6> # Security update for python Announcement ID: SUSE-SU-2026:4411-1 Release Date: 2026-10-01T15:38:59Z Rating: moderate References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 Cross-References: * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-6879 * CVE-2026-9669 CVSS scores: * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for python fixes the following issues: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: * Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4411 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python-xml-debuginfo-2.7.18-150000.133.1 * python-gdbm-debuginfo-2.7.18-150000.133.1 * libpython2_7-1_0-2.7.18-150000.133.1 * python-debuginfo-2.7.18-150000.133.1 * python-xml-2.7.18-150000.133.1 * python-base-debugsource-2.7.18-150000.133.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.133.1 * python-debugsource-2.7.18-150000.133.1 * python-curses-2.7.18-150000.133.1 * python-base-debuginfo-2.7.18-150000.133.1 * python-gdbm-2.7.18-150000.133.1 * python-curses-debuginfo-2.7.18-150000.133.1 * python-base-2.7.18-150000.133.1 * python-2.7.18-150000.133.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 1 20:31:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 01 Oct 2026 20:31:25 -0000 Subject: SUSE-SU-2026:4410-1: important: Security update for libX11 Message-ID: <179088668593.13136.9107149408003066611@32be4de442c6> # Security update for libX11 Announcement ID: SUSE-SU-2026:4410-1 Release Date: 2026-10-01T14:41:50Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4410 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4410 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libX11-debugsource-1.6.2-12.41.1 * libX11-xcb1-debuginfo-1.6.2-12.41.1 * libX11-6-1.6.2-12.41.1 * libX11-xcb1-1.6.2-12.41.1 * libX11-6-debuginfo-1.6.2-12.41.1 * libX11-devel-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libX11-6-debuginfo-32bit-1.6.2-12.41.1 * libX11-xcb1-debuginfo-32bit-1.6.2-12.41.1 * libX11-6-32bit-1.6.2-12.41.1 * libX11-xcb1-32bit-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * libX11-data-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libX11-6-debuginfo-32bit-1.6.2-12.41.1 * libX11-debugsource-1.6.2-12.41.1 * libX11-devel-1.6.2-12.41.1 * libX11-xcb1-debuginfo-32bit-1.6.2-12.41.1 * libX11-xcb1-debuginfo-1.6.2-12.41.1 * libX11-6-32bit-1.6.2-12.41.1 * libX11-xcb1-1.6.2-12.41.1 * libX11-6-debuginfo-1.6.2-12.41.1 * libX11-6-1.6.2-12.41.1 * libX11-xcb1-32bit-1.6.2-12.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * libX11-data-1.6.2-12.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 12:31:04 -0000 Subject: SUSE-SU-2026:4414-1: important: Security update for openssl-3 Message-ID: <179094426470.14515.14659237590236178944@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4414-1 Release Date: 2026-10-02T07:37:36Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 * bsc#1281125 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 11 vulnerabilities and has one security fix can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). Other non-security fixes: \- Add a conflicts with previous crypto-policies versions (bsc#1281125) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4414 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-150700.5.53.2 * libopenssl3-3.5.0-150700.5.53.2 * openssl-3-debugsource-3.5.0-150700.5.53.2 * libopenssl-3-devel-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-debuginfo-3.5.0-150700.5.53.2 * openssl-3-debuginfo-3.5.0-150700.5.53.2 * openssl-3-3.5.0-150700.5.53.2 * Basesystem Module 15-SP7 (x86_64) * libopenssl3-32bit-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-32bit-3.5.0-150700.5.53.2 * libopenssl-3-fips-provider-32bit-debuginfo-3.5.0-150700.5.53.2 * libopenssl3-32bit-debuginfo-3.5.0-150700.5.53.2 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 * https://bugzilla.suse.com/show_bug.cgi?id=1281125 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:31:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 12:31:50 -0000 Subject: SUSE-SU-2026:4413-1: important: Security update for openssl-3 Message-ID: <179094431039.14515.2116773664872846010@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4413-1 Release Date: 2026-10-02T07:37:18Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4413 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4413 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4413 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4413 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4413 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4413 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4413 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4413 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4413 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (x86_64) * libopenssl3-32bit-debuginfo-3.0.8-150400.4.101.1 * libopenssl-3-devel-32bit-3.0.8-150400.4.101.1 * libopenssl3-32bit-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libopenssl-3-devel-64bit-3.0.8-150400.4.101.1 * libopenssl3-64bit-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-64bit-3.0.8-150400.4.101.1 * openSUSE Leap 15.4 (noarch) * openssl-3-doc-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-3.0.8-150400.4.101.1 * libopenssl3-3.0.8-150400.4.101.1 * libopenssl3-debuginfo-3.0.8-150400.4.101.1 * openssl-3-debugsource-3.0.8-150400.4.101.1 * libopenssl-3-devel-3.0.8-150400.4.101.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 12:32:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 12:32:52 -0000 Subject: SUSE-SU-2026:4412-1: important: Security update for openssl-3 Message-ID: <179094437275.14515.3200373268105177916@e7f4ad8d9866> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4412-1 Release Date: 2026-10-02T07:36:26Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4412 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4412 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4412 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4412 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4412 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (x86_64) * libopenssl3-32bit-3.0.8-150500.5.80.1 * libopenssl-3-devel-32bit-3.0.8-150500.5.80.1 * libopenssl3-32bit-debuginfo-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libopenssl3-64bit-3.0.8-150500.5.80.1 * libopenssl-3-devel-64bit-3.0.8-150500.5.80.1 * libopenssl3-64bit-debuginfo-3.0.8-150500.5.80.1 * openSUSE Leap 15.5 (noarch) * openssl-3-doc-3.0.8-150500.5.80.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debuginfo-3.0.8-150500.5.80.1 * libopenssl3-debuginfo-3.0.8-150500.5.80.1 * libopenssl-3-devel-3.0.8-150500.5.80.1 * libopenssl3-3.0.8-150500.5.80.1 * openssl-3-debugsource-3.0.8-150500.5.80.1 * openssl-3-3.0.8-150500.5.80.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 16:31:07 -0000 Subject: SUSE-SU-2026:4415-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) Message-ID: <179095866726.14856.14707849017095451154@32be4de442c6> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4415-1 Release Date: 2026-10-02T08:33:43Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.44 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4415 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-SLE15-SP7-RT_Update_13-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-debuginfo-8-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:31:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 16:31:45 -0000 Subject: SUSE-SU-2026:4419-1: important: Security update for openssl-3 Message-ID: <179095870538.14856.4268360768321498725@32be4de442c6> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:4419-1 Release Date: 2026-10-02T10:23:35Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4419 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4419 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4419 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-devel-32bit-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libopenssl3-64bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-64bit-3.1.4-150600.5.67.1 * libopenssl3-64bit-3.1.4-150600.5.67.1 * libopenssl-3-devel-64bit-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-64bit-debuginfo-3.1.4-150600.5.67.1 * openSUSE Leap 15.6 (noarch) * openssl-3-doc-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * openssl-3-debugsource-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-3.1.4-150600.5.67.1 * openssl-3-3.1.4-150600.5.67.1 * libopenssl-3-devel-3.1.4-150600.5.67.1 * libopenssl3-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-debuginfo-3.1.4-150600.5.67.1 * openssl-3-debuginfo-3.1.4-150600.5.67.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libopenssl-3-fips-provider-32bit-3.1.4-150600.5.67.1 * libopenssl3-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl-3-fips-provider-32bit-debuginfo-3.1.4-150600.5.67.1 * libopenssl3-32bit-3.1.4-150600.5.67.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:32:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 16:32:42 -0000 Subject: SUSE-SU-2026:4418-1: important: Security update for openssl-3-livepatches Message-ID: <179095876283.14856.3494443541005857331@32be4de442c6> # Security update for openssl-3-livepatches Announcement ID: SUSE-SU-2026:4418-1 Release Date: 2026-10-02T10:23:18Z Rating: important References: * bsc#1280587 * bsc#1282798 Cross-References: * CVE-2026-84782 CVSS scores: * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-3-livepatches fixes the following issue: * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4418 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4418 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * openssl-3-livepatches-0.7-150600.13.22.1 * openssl-3-livepatches-debuginfo-0.7-150600.13.22.1 * openssl-3-livepatches-debugsource-0.7-150600.13.22.1 * openSUSE Leap 15.6 (x86_64) * openssl-3-livepatches-0.7-150600.13.22.1 * openssl-3-livepatches-debuginfo-0.7-150600.13.22.1 * openssl-3-livepatches-debugsource-0.7-150600.13.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1282798 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:33:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 16:33:39 -0000 Subject: SUSE-SU-2026:4417-1: important: Security update for helm Message-ID: <179095881976.14856.8303736703731578885@32be4de442c6> # Security update for helm Announcement ID: SUSE-SU-2026:4417-1 Release Date: 2026-10-02T09:20:20Z Rating: important References: * bsc#1281104 * bsc#1281112 Cross-References: * CVE-2026-85731 * CVE-2026-85732 CVSS scores: * CVE-2026-85731 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-85731 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-85731 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-85731: oras.land/oras-go/v2: arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (bsc#1281104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). Changes for helm: * Update to version 3.22.0: * chore(deps): bump the k8s-io group across 1 directory with 6 updates * bump version to 3.22 (#32606) * fix: set [pull,push] scope when helm push to a registry(use token auth) (backport) (#32362) * chore(deps): bump the k8s-io group with 7 updates (#32573) * chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#32563) * chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#32554) * chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#32542) * [dev-v3 backport] deps: bump google.golang.org/grpc at v1.82.1 for GO-2026-6061 (#32536) * fix: bump go.opentelemetry.io/otel at v1.44.0 for GO-2026-5158 (#32535) * chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 * fix(provenance): migrate to ProtonMail/go-crypto to resolve GO-2026-5932 * chore(deps): bump the k8s-io group with 7 updates * chore(deps): bump github/codeql-action/upload-sarif (#32449) * chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 * chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 (#32381) * chore(deps): bump github/codeql-action/upload-sarif (#32382) * ci: auto-label PRs targeting dev-v3 (#32340) * chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#32331) * chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#32332) * chore(deps): bump github/codeql-action/analyze from 3.26.6 to 4.37.0 (#32357) * chore(deps): bump github/codeql-action/upload-sarif (#32360) * chore(deps): bump github/codeql-action/init from 3.26.6 to 4.37.0 (#32359) * chore(deps): bump golang/govulncheck-action from 1.0.4 to 1.1.0 (#32356) * chore(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.3.0 (#32354) * chore(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.3 (#32353) * chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 (#32310) * chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#32308) * chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 (#32306) * fix(engine): prevent Files.Lines panic on empty file * fix: drop containerd v1 dep to resolve govulncheck CVEs * chore(deps): bump github.com/containerd/containerd from 1.7.32 to 1.7.33 * chore(deps): bump github.com/cyphar/filepath-securejoin * chore(deps): bump the k8s-io group with 2 updates * chore(deps): bump the k8s-io group across 1 directory with 2 updates * fix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1 * chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 * chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 * chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 * chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 * ci: bump golangci-lint to v2.11.3 for go 1.26 * chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.3 * chore(deps): bump github.com/distribution/distribution/v3 * chore(deps): bump github.com/containerd/containerd from 1.7.30 to 1.7.32 * chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 * chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 * chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 * fix(deps): bump golang.org/x/net to v0.55.0 to address GO-2026-5026 * chore(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 * chore(deps): bump golang.org/x/text from 0.35.0 to 0.37.0 * [v3] Bump to version v3.21 (#32103) * [v3 backport] Fix rollback for missing resources * fix(action): avoid nil REST client getter panic when installing CRDs ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4417 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4417 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4417 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4417 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4417 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4417 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4417 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4417 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4417 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4417 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4417 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4417 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4417 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * Containers Module 15-SP7 (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Package Hub 15 15-SP7 (noarch) * helm-fish-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * helm-3.22.0-150000.1.99.1 * helm-debuginfo-3.22.0-150000.1.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * helm-bash-completion-3.22.0-150000.1.99.1 * helm-zsh-completion-3.22.0-150000.1.99.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85731.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281104 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 16:34:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 16:34:19 -0000 Subject: SUSE-SU-2026:4416-1: important: Security update for python-anyio Message-ID: <179095885977.14856.12429484895020469789@32be4de442c6> # Security update for python-anyio Announcement ID: SUSE-SU-2026:4416-1 Release Date: 2026-10-02T09:18:10Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: : TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4416 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4416 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4416 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4416 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4416 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4416 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4416 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4416 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4416 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4416 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4416 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4416 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4416 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4416 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4416 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * openSUSE Leap 15.4 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP5 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Public Cloud Module 15-SP6 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 * Python 3 Module 15-SP7 (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-anyio-4.1.0-150400.9.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:30:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 20:30:33 -0000 Subject: SUSE-SU-2026:4434-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097303392.29359.13000422891671459925@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4434-1 Release Date: 2026-10-02T15:04:03Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4434 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_75-rt-debuginfo-2-150700.2.1 * kernel-livepatch-6_4_0-150700_7_75-rt-2-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_20-debugsource-2-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:31:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 20:31:27 -0000 Subject: SUSE-SU-2026:4433-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097308707.29359.1074464601007312815@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4433-1 Release Date: 2026-10-02T15:03:58Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4433 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_72-rt-debuginfo-3-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_19-debugsource-3-150700.2.1 * kernel-livepatch-6_4_0-150700_7_72-rt-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:32:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 20:32:24 -0000 Subject: SUSE-SU-2026:4432-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097314479.29359.4255888988084504344@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4432-1 Release Date: 2026-10-02T14:33:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4432 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4431 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_67-rt-debuginfo-3-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-5-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_18-debugsource-3-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_17-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_7_67-rt-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 2 20:33:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 02 Oct 2026 20:33:31 -0000 Subject: SUSE-SU-2026:4426-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Message-ID: <179097321149.29359.18312810292700150045@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4426-1 Release Date: 2026-10-02T13:34:08Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.54 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4426 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4427 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4422 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4429 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4423 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4420 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4421 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4425 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4430 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4428 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4424 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_51-rt-debuginfo-7-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_15-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-debuginfo-10-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_12-debugsource-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-debuginfo-12-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-debuginfo-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_11-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_4-debugsource-18-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_8-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-debuginfo-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_10-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-18-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-10-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_6-debugsource-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-12-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_9-debugsource-12-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_14-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-debuginfo-18-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:31:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:31:23 -0000 Subject: SUSE-SU-2026:4440-1: important: Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Message-ID: <179118908347.18075.9331868696326387443@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4440-1 Release Date: 2026-10-04T13:03:56Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4440 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_290-default-14-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:33:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:33:43 -0000 Subject: SUSE-SU-2026:23991-1: moderate: Security update for wget Message-ID: <179118922376.18075.3505090457272103311@e7f4ad8d9866> # Security update for wget Announcement ID: SUSE-SU-2026:23991-1 Release Date: 2026-10-01T12:43:37Z Rating: moderate References: * bsc#1276962 Cross-References: * CVE-2026-16599 CVSS scores: * CVE-2026-16599 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-16599 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-16599 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issue: * CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1802 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1802 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * wget-lang-1.25.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * wget-lang-1.25.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16599.html * https://bugzilla.suse.com/show_bug.cgi?id=1276962 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:34:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:34:42 -0000 Subject: SUSE-SU-2026:23990-1: moderate: Security update for distribution Message-ID: <179118928298.18075.16680326192253561552@e7f4ad8d9866> # Security update for distribution Announcement ID: SUSE-SU-2026:23990-1 Release Date: 2026-10-01T12:14:32Z Rating: moderate References: * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-81871 * CVE-2026-81872 CVSS scores: * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for distribution fixes the following issues: * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1801 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1801 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * distribution-registry-3.1.1-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:35:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:35:38 -0000 Subject: SUSE-SU-2026:23989-1: moderate: Security update for jline3 Message-ID: <179118933892.18075.3240787165167590280@e7f4ad8d9866> # Security update for jline3 Announcement ID: SUSE-SU-2026:23989-1 Release Date: 2026-10-01T12:14:32Z Rating: moderate References: Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that can now be installed. ## Description: This update for jline3 fixes the following issue: Update to upstream version 3.30.17: * Security Fixes * Native Stack Buffer Overflow in Public INPUT_RECORD.memmove JNI Method (Windows) (GHSA-6r3w-6jpj-x5w6) * Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions (GHSA-7h86-pjwh-gpqj) * Authenticated SSH DoS via Unbounded Window-Change Terminal Geometry (GHSA-m935-wqpj-pvp3) * TCP Socket File Descriptor Leak When Maximum Connections Reached (GHSA-c87g-867h-cqr6) * Bug Fixes * strip control characters from file names in posix builtins * bound !# history expansion to prevent exponential blowup * verify server host keys in the ssh client builtin * address remaining security vulnerabilities reported by AFINE/CERT.PL * backport security fixes from master * backport security fixes to 3.x (path traversal + DSR plain text) * strip control characters from ssh banner and prompts * Dependency updates * bump com.diffplug.spotless:spotless-maven-plugin from 3.8.0 to 3.10.2 * bump slf4j.version from 2.0.18 to 2.0.19 * bump org.apache.maven.plugins:maven-surefire-plugin from 3.5.6 to 3.6.0 * bump org.apache.maven.plugins:maven-compiler-plugin from 3.15.0 to 3.16.0 * bump org.apache.felix:maven-bundle-plugin from 6.0.2 to 6.1.2 * bump actions/setup-java from 5 to 6.0.0 * bump org.graalvm.sdk:graal-sdk from 25.1.3 to 25.3.4.1 * bump com.mycila:license-maven-plugin from 5.0.0 to 5.1.2 * bump org.easymock:easymock from 5.6.0 to 5.7.0 * bump com.google.jimfs:jimfs from 1.3.1 to 1.3.2 * bump org.apache.maven.wrapper:maven-wrapper from 3.3.2 to 3.3.4 * bump org.apache.maven:apache-maven from 4.0.0-rc-3 to 4.0.0-rc-6 * bump eu.maveniverse.maven.njord:extension3 from 0.9.9 to 0.9.10 * bump com.palantir.javaformat:palantir-java-format from 2.96.0 to 2.97.0 * bump release-drafter/release-drafter from 7.6.0 to 7.7.0 * bump groovy.version from 4.0.32 to 4.0.33 * bump release-drafter/release-drafter from 7 to 7.6.0 * bump org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 * Update to upstream version 3.30.16 * bugfix release with security hardening, SSH agent forwarding fix, and terminal compatibility improvements. * Breaking Changes * SSH agent forwarding is no longer enabled by default; pass -A to explicitly request it * reject overlong hex components in OSC color responses * strip OSC and other escape sequences in ansiAppend * search multiple lib paths for versioned libutil.so * use Path.resolve instead of URI.resolve in cat and sort to prevent SSRF * check closed flag in PtyInputStream to prevent hang on empty input * confine ConfigurationPath lookups to the config directory * disable Read File command in nano restricted mode * drain buffered data before EOF in NonBlockingPumpInputStream * look up openpty in libc.so.6 for glibc 2.34+ * guard styleMatches and highlighter rules against ReDoS * backport telnet DoS mitigations (GHSA-47qp, GHSA-2r2c) * propagate EOF in PtyInputStream to avoid infinite loop * bump org.apache.ivy:ivy from 2.5.3 to 2.6.0 * bump actions/setup-node from 6 to 7 * bump com.palantir.javaformat:palantir-java-format from 2.94.0 to 2.96.0 * bump sshd.version from 2.18.0 to 2.19.0 * bump org.codehaus.gmavenplus:gmavenplus-plugin from 5.0.0 to 5.1.0 * bump org.graalvm.sdk:graal-sdk from 25.0.3 to 25.1.3 * bump com.diffplug.spotless:spotless-maven-plugin ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1800 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1800 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * jline3-3.30.17-160000.1.1 * jline3-debugsource-3.30.17-160000.1.1 * jline3-native-debuginfo-3.30.17-160000.1.1 * jline3-native-3.30.17-160000.1.1 * jline3-jansi-3.30.17-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * jline3-terminal-jni-3.30.17-160000.1.1 * jline3-terminal-jna-3.30.17-160000.1.1 * jline3-terminal-3.30.17-160000.1.1 * jline3-reader-3.30.17-160000.1.1 * jline3-console-ui-3.30.17-160000.1.1 * jline3-console-3.30.17-160000.1.1 * jline3-curses-3.30.17-160000.1.1 * jline3-javadoc-3.30.17-160000.1.1 * jline3-jansi-core-3.30.17-160000.1.1 * jline3-builtins-3.30.17-160000.1.1 * jline3-style-3.30.17-160000.1.1 * jline3-terminal-jansi-3.30.17-160000.1.1 * jline3-remote-telnet-3.30.17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * jline3-3.30.17-160000.1.1 * jline3-debugsource-3.30.17-160000.1.1 * jline3-native-debuginfo-3.30.17-160000.1.1 * jline3-native-3.30.17-160000.1.1 * jline3-jansi-3.30.17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * jline3-terminal-jni-3.30.17-160000.1.1 * jline3-terminal-jna-3.30.17-160000.1.1 * jline3-terminal-3.30.17-160000.1.1 * jline3-reader-3.30.17-160000.1.1 * jline3-console-ui-3.30.17-160000.1.1 * jline3-console-3.30.17-160000.1.1 * jline3-curses-3.30.17-160000.1.1 * jline3-javadoc-3.30.17-160000.1.1 * jline3-jansi-core-3.30.17-160000.1.1 * jline3-builtins-3.30.17-160000.1.1 * jline3-style-3.30.17-160000.1.1 * jline3-terminal-jansi-3.30.17-160000.1.1 * jline3-remote-telnet-3.30.17-160000.1.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:38:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:38:06 -0000 Subject: SUSE-SU-2026:23986-1: important: Security update for valkey Message-ID: <179118948608.18075.10964632469249863377@e7f4ad8d9866> # Security update for valkey Announcement ID: SUSE-SU-2026:23986-1 Release Date: 2026-09-30T20:24:10Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1796 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1796 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * valkey-debuginfo-8.0.10-160000.2.1 * valkey-debugsource-8.0.10-160000.2.1 * valkey-devel-8.0.10-160000.2.1 * valkey-8.0.10-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * valkey-compat-redis-8.0.10-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * valkey-debuginfo-8.0.10-160000.2.1 * valkey-debugsource-8.0.10-160000.2.1 * valkey-devel-8.0.10-160000.2.1 * valkey-8.0.10-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * valkey-compat-redis-8.0.10-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:39:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:39:34 -0000 Subject: SUSE-SU-2026:23985-1: critical: Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 Message-ID: <179118957456.18075.7807679677488384912@e7f4ad8d9866> # Security update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 Announcement ID: SUSE-SU-2026:23985-1 Release Date: 2026-09-30T17:58:26Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 15 vulnerabilities and has one fix can now be installed. ## Description: This update for libtcnative-1-0, libtcnative-2-0, tomcat, tomcat10, tomcat11 fixes the following issues: Security issues fixed: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: Apache Tomcat: Stale HPACK emitter injects trailers (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: Apache Tomcat: WebSocket message smuggling with (bsc#1282581). Non security issue fixed: * package libtcnative-1-0-devel houses link to libtcnative-1.so instead of package libtcnative-1-0 (bsc#622430). Changes for libtcnative-1-0: * Update to 1.3.9 * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for libtcnative-2-0: * Upgrade to version 2.0.16 * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Update: Remove support for Windows build on IA64 architecture (Itanium) * Update: Make x64 the default architecture for Windows build * Update: Make Windows 10 / 11 the default target version for Windows builds * Fix: Fix a potential crash when negotiating ALPN * Fix: If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Fix: Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) Changes for tomcat10: * Update to Tomcat 10.1.60 * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat11: * Update to Tomcat 11.0.26 * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: parsing of client certificates that specify more than one OCSP responder for configurations that use OpenSSL-FFM. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat: * Update to Tomcat 9.0.122 * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1795 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1795 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libtcnative-2-0-debugsource-2.0.16-160000.1.1 * libtcnative-1-0-1.3.9-160000.1.1 * libtcnative-2-0-2.0.16-160000.1.1 * libtcnative-1-0-debugsource-1.3.9-160000.1.1 * libtcnative-2-0-debuginfo-2.0.16-160000.1.1 * libtcnative-1-0-debuginfo-1.3.9-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * tomcat-javadoc-9.0.122-160000.1.1 * tomcat10-admin-webapps-10.1.60-160000.1.1 * tomcat-embed-9.0.122-160000.1.1 * tomcat10-doc-10.1.60-160000.1.1 * tomcat11-jsvc-11.0.26-160000.1.1 * tomcat11-doc-11.0.26-160000.1.1 * tomcat10-docs-webapp-10.1.60-160000.1.1 * tomcat10-lib-10.1.60-160000.1.1 * tomcat10-servlet-6_0-api-10.1.60-160000.1.1 * tomcat-servlet-4_0-api-9.0.122-160000.1.1 * tomcat-9.0.122-160000.1.1 * tomcat-jsp-2_3-api-9.0.122-160000.1.1 * tomcat11-admin-webapps-11.0.26-160000.1.1 * tomcat11-embed-11.0.26-160000.1.1 * tomcat11-jsp-4_0-api-11.0.26-160000.1.1 * tomcat11-el-6_0-api-11.0.26-160000.1.1 * tomcat11-webapps-11.0.26-160000.1.1 * tomcat-docs-webapp-9.0.122-160000.1.1 * tomcat-admin-webapps-9.0.122-160000.1.1 * tomcat-webapps-9.0.122-160000.1.1 * tomcat-el-3_0-api-9.0.122-160000.1.1 * tomcat10-jsvc-10.1.60-160000.1.1 * tomcat-jsvc-9.0.122-160000.1.1 * tomcat10-el-5_0-api-10.1.60-160000.1.1 * tomcat10-webapps-10.1.60-160000.1.1 * tomcat10-10.1.60-160000.1.1 * tomcat-lib-9.0.122-160000.1.1 * tomcat11-lib-11.0.26-160000.1.1 * tomcat11-servlet-6_1-api-11.0.26-160000.1.1 * tomcat10-embed-10.1.60-160000.1.1 * tomcat10-jsp-3_1-api-10.1.60-160000.1.1 * tomcat11-docs-webapp-11.0.26-160000.1.1 * tomcat11-11.0.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-debugsource-2.0.16-160000.1.1 * libtcnative-1-0-1.3.9-160000.1.1 * libtcnative-2-0-2.0.16-160000.1.1 * libtcnative-1-0-debugsource-1.3.9-160000.1.1 * libtcnative-2-0-debuginfo-2.0.16-160000.1.1 * libtcnative-1-0-debuginfo-1.3.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * tomcat-javadoc-9.0.122-160000.1.1 * tomcat10-admin-webapps-10.1.60-160000.1.1 * tomcat-embed-9.0.122-160000.1.1 * tomcat10-doc-10.1.60-160000.1.1 * tomcat11-jsvc-11.0.26-160000.1.1 * tomcat11-doc-11.0.26-160000.1.1 * tomcat10-docs-webapp-10.1.60-160000.1.1 * tomcat10-lib-10.1.60-160000.1.1 * tomcat10-servlet-6_0-api-10.1.60-160000.1.1 * tomcat-servlet-4_0-api-9.0.122-160000.1.1 * tomcat-9.0.122-160000.1.1 * tomcat-jsp-2_3-api-9.0.122-160000.1.1 * tomcat11-admin-webapps-11.0.26-160000.1.1 * tomcat11-embed-11.0.26-160000.1.1 * tomcat11-jsp-4_0-api-11.0.26-160000.1.1 * tomcat11-el-6_0-api-11.0.26-160000.1.1 * tomcat11-webapps-11.0.26-160000.1.1 * tomcat-docs-webapp-9.0.122-160000.1.1 * tomcat-admin-webapps-9.0.122-160000.1.1 * tomcat-webapps-9.0.122-160000.1.1 * tomcat-el-3_0-api-9.0.122-160000.1.1 * tomcat10-jsvc-10.1.60-160000.1.1 * tomcat-jsvc-9.0.122-160000.1.1 * tomcat10-el-5_0-api-10.1.60-160000.1.1 * tomcat10-webapps-10.1.60-160000.1.1 * tomcat10-10.1.60-160000.1.1 * tomcat-lib-9.0.122-160000.1.1 * tomcat11-lib-11.0.26-160000.1.1 * tomcat11-servlet-6_1-api-11.0.26-160000.1.1 * tomcat10-embed-10.1.60-160000.1.1 * tomcat10-jsp-3_1-api-10.1.60-160000.1.1 * tomcat11-docs-webapp-11.0.26-160000.1.1 * tomcat11-11.0.26-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:41:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:41:00 -0000 Subject: SUSE-SU-2026:23984-1: important: Security update for helm Message-ID: <179118966032.18075.17151137798732176832@e7f4ad8d9866> # Security update for helm Announcement ID: SUSE-SU-2026:23984-1 Release Date: 2026-09-30T17:58:26Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-78662 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426). * CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1794 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1794 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.1.1 * helm-fish-completion-4.3.0-160000.1.1 * helm-bash-completion-4.3.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.1.1 * helm-fish-completion-4.3.0-160000.1.1 * helm-bash-completion-4.3.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:42:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:42:24 -0000 Subject: SUSE-SU-2026:23983-1: important: Security update for sccache Message-ID: <179118974434.18075.17994136679502387807@e7f4ad8d9866> # Security update for sccache Announcement ID: SUSE-SU-2026:23983-1 Release Date: 2026-09-30T17:58:26Z Rating: important References: * bsc#1243868 * bsc#1257923 * bsc#1270206 * bsc#1270512 * bsc#1270559 * bsc#1270693 * bsc#1270736 * bsc#1270869 * bsc#1270938 * bsc#1270948 * bsc#1273881 * bsc#1273884 * bsc#1273886 * bsc#1273888 * bsc#1274146 * bsc#1282211 Cross-References: * CVE-2024-12224 * CVE-2026-25541 * CVE-2026-25727 * CVE-2026-41676 * CVE-2026-41677 * CVE-2026-41678 * CVE-2026-41681 * CVE-2026-41898 * CVE-2026-42327 * CVE-2026-44662 * CVE-2026-45784 * CVE-2026-66746 * CVE-2026-66754 * CVE-2026-67181 * CVE-2026-67182 * CVE-2026-93599 * CVE-2026-93600 * CVE-2026-93601 * CVE-2026-93602 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-41676 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-41676 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-41676 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41676 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41677 ( SUSE ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U * CVE-2026-41677 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41677 ( NVD ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41677 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41678 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-41678 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-41678 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41678 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-41681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-41681 ( NVD ): 8.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41681 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41898 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41898 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-41898 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41898 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-42327 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42327 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42327 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44662 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-44662 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-44662 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45784 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-45784 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-66746 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-66746 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-66746 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66746 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-66754 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66754 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66754 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66754 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-67181 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-67181 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2026-67181 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-67181 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L * CVE-2026-67182 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-67182 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-67182 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-67182 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L * CVE-2026-93599 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93599 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93599 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93599 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93600 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-93600 ( SUSE ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93600 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93600 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93601 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93601 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93601 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93601 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93602 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93602 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93602 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93602 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for sccache fixes the following issues: * CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243868). * CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274146). * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257923). * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270206). * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270559). * CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust- openssl crate (bsc#1270693). * CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate (bsc#1270736). * CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent memory in rust-openssl crate (bsc#1270869). * CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate (bsc#1270512). * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key- wrap-with-padding in rust-openssl crate (bsc#1270938). * CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust- openssl crate (bsc#1270948). * CVE-2026-66746: rouille: HTTP Response Splitting via Unvalidated Response Header Values (bsc#1273881). * CVE-2026-66754: rouille: remove_prefix function that allows remote unauthenticated attackers to crash the server by sending a crafted percent- encoded URL (bsc#1273884). * CVE-2026-67181: rouille: HTTP Request Smuggling via Transfer-Encoding Desynchronization (bsc#1273886). * CVE-2026-67182: rouille: HTTP Request Smuggling Enables Front-End Access Control Bypass (bsc#1273888). * CVE-2026-93599: rustls-webpki: panic via empty BIT STRING (bsc#1282211). * CVE-2026-93600: rustls-webpki: name constraints URI validation bypass (bsc#1282211). * CVE-2026-93601: rustls-webpki: name constraint bypass (bsc#1282211). * CVE-2026-93602: rustls-webpki: CRL revocation check bypass (bsc#1282211). Changes for sccache: Update to version 0.18.0~2: * Add experimental concurrent cache support * chore: Remove dependency status badge (#2856) * Don't hand the jobserver to children that can't use it * dist: refuse to trim rlibs from crates that also emit a cdylib * fix(cache): avoid duplicate multilevel reads * Strip basedirs from the compiler arguments too * tests/integration: replace MinIO with Silo * ci: dump sccache logs on integration failures * multilevel: a chain with any writable level is writable * Fix parsing of #line directives * Release 0.18.0 * daemonize: use an allow-list approach to inherited FDs * gcc, clang: make the assembler part of the cache key * support cl.exe /openmp:llvm * support all current /fsanitize _, /fsanitize-coverage_ , and /fno-sanitize* args * support MSVC /feature argument * msvc: support lots of flags (#2832) * Update shlex dependency to version 2 (#2836) * gcc: mark flags as TooHard if need to cache something else (#2833) * clang: support more CLI options (#2834) * msvc: support arm64EC and fastfail flags (#2830) * chore: fix typo in comment (#2829) * nvcc: accept the --diag-error/--diag-suppress/--diag-warn family (#2816) * cache: allow skipping capability checks (#2822) * Bump opendal to 0.58.1 and fix fallout (fixes local GCS cache usage) (#2715) * nvcc (Windows): protect escaped quotes in dryrun lines before flattening backslashes (#2811) * Add an agent (#2812) * Add support for d20bforceinline. (#2807) * feat: add Microsoft Entra ID (passwordless) auth for the Azure Blob backend (#2802) * Bump MSRV to 1.91.0 (#2793) * Fix `nvcc` dryrun parsing for CUDA 13.3 (#2722) * test: Fixed hardcoded binary path in test * Release 0.17.0 * tests: pin libc in the dist test crate * doc: clarify server-side outputs and drop 'recommended mode' claim * doc: document SCCACHE_CLIENT_SIDE env var * doc: document client-side and direct modes in Architecture.md * Fix description of Unix socket-based Redis connection * server: remove redundant async block in start_compile_task * server: simplify bind() request loops with ? instead of manual match arms * Add support for arg files in Rust (#2782) * feat: support S3 SSE-KMS with AWS- managed and customer-managed keys (#2770) * abort compile tasks and associated subprocesses when a client disconnects * treat -ivfsoverlay as a preprocessor- only argument * gcc: refine response-file tokenizer visibility and whitespace handling * integration: convert cmake 4.x modules XFAIL test to a passing test * gcc/clang: cache and distribute builds using quoted @response files * fix: Fix ToolchainPackager cfg gate to build on ppc64le/s390x * fix: make gcc diagnostics color output work the same as for rustc * implement client-side mode * split handle_compile_response so that the compilation result can be handled separately * implement IpcStorage -- Storage backend over IPC * extend wire protocol with storage RPCs * implement AddAssign for ServerStats and related types * add Storage::get_path for direct file access * implement get_raw/put_raw on MultiLevelStorage * add client_side_mode config flag (SCCACHE_CLIENT_SIDE) * Extract new_client_runtime() helper to DRY up client runtime creation * Clarify single-threaded runtime rationale comment (grammar) * fix: use single-threaded tokio runtime in sccache dist-client * fix: use single-threaded tokio runtime in sccache client * fix: handle disabled cache backend features in multilevel chain * Fix ldd output parsing: remove .exists() check that failed on systems where the symlink source path does not exist locally (e.g. aarch64) * Fix cfg guard for PanicToolchainPackager to also cover non-x86_64 Linux architectures (e.g. aarch64) * Release 0.16.0 * fix: strip SCCACHE_BASEDIRS from escaped-backslash paths on Windows (#2736) * Ignore empty-set environment values (#2639) * feat: all backends support making them as read-only (#2705) * Enable RE on Linux- aarch64 (#2668) * Slightly improve logging (#2734) * chore: encode jwt key and cert digest with base64 in logs (#2712) * chore: make clippy happy (#2727) * feat: avoid sccache wrapper when resolving compiler (#2720) * Fall back to direct cache write if tempfile creation on the same fs fails (#2369) * remove too noisy bench * feat(nvcc): support argument: `--dependency-output` (#2708) * fix: add newline when printing dist-status to stdout * Revert "Classify .s files as AssemblerToPreprocess so #include/#ifdef are hon..." * Don't wait depfiles for gcc/clang preprocessed inputs * Classify .s files as AssemblerToPreprocess so #include/#ifdef are honored * prepare release 0.15.0 * Add cargo-binstall metadata for prebuilt binary installation * Fix coverage * fix: handle directories in dep-info source file hashing * docs(Rust.md): Add caveats from README * Add retry for dists docker image build * ci: set crt-static for riscv64 musl targets * feat: Add loongarch64 support * feat: Implement multi-tier caching with fallback and backfilling (#2581) * msvc: add support for Y-, YI, Zf flags * Group tests logging in CI * Add failing test for cmake-modules + cmake 4 version * Unfold ninja output in the test * Add a comment for maintaining integration tests * Move cmake-modules to integration tests * fix: exclude CARGO_ENCODED_RUSTFLAGS from env var hash (#2651) * chore(deps): update rust crate quinn-proto to v0.11.14 * Fix sync GCS initialization * clippy: fix from_iter_instead_of_collect lint * fix: add Win32_Security feature to windows- sys dependency * build(deps): bump actions/download-artifact from 5 to 8 * msvc: Append the default .pdb extension for the /Fd argument (#2621) * build(deps): bump actions/upload-artifact from 4 to 7 * clippy: fix ref_option lint * ci: install grcov from prebuilt binary instead of cargo install * ci: use default toolchain to install grcov * ci: fix artifact_failure action when target dir does not exist * Remove benchmark normalize_win_path_utf8 (#2634) * Revert "actions: add security audit workflow (#2594)" (#2603) * partial c++20 module support (#2516) * clippy: fix ptr_as_ptr lint (#2611) * Add support for `d1nodatetime` & `await:strict` MSVC flags (#2617) * chore: switch thirtyfour_sync to thirtyfour (#2613) * clippy: fix manual_string_new lint (#2609) * clippy: fix unnecessary_semicolon lint (#2615) * clippy: fix explicit_into_iter_loop lint (#2616) * Avoid double-caching when ccache is installed in PATH (#2524) * clippy: fix cloned_instead_of_copied lint (#2605) * clippy: fix semicolon_if_nothing_returned lint (#2601) * Move PreprocessorCacheModeConfig to src/config.rs (#2604) * clippy: fix cloned_ref_to_slice_refs lint (#2602) * prepare the new release (#2600) * chore: update to toml 0.9 (#2599) * ci: Add coverage to integration tests, report it to Codecov.io (#2598) * Preparation for multilevel caching (#2597) * Add sccache- dist to flake.nix (#2579) * fixup! cargo fmt * fixup! rustfmt update * Extract FileObjectSource, CacheRead and CacheWrite to cache_io.rs * chore: update to nix 0.30 * Add a helper method to get a correct backend name * Add cos feature gate to RemoteStorage * Simplify profiles for integration tests * clippy: fix implicit_clone lint (#2584) * actions: add security audit workflow (#2594) * docs: fix examples showing an xz-compress toolchain archive (#2587) * add benches for normalize_win_path strip_basedirs (#2588) * snap: update to core24 (#2570) * Add .rustfmt.toml for consistent style between `rustfmt` and `cargo fmt` (#2582) * add comments about auth token requirements (#2583) * chore: update to tokio-serde 0.9 (#2585) * ci: update freebsd to 15.0 (#2586) * distributed compilation support for asm & preprocessor outputs (#2557) * remove unused declaration (#2577) * Extract LazyDiskCache to a separated file (#2573) * Revert "ci: show diff for toml_format" (#2578) * Open Add SCCACHE_BASEDIRS support * ci: show diff for toml_format * chore: update to syslog 7 * refactor: use matrix to reduce deduplication * fix: remove outdated `analysis` mode * Unbreak the s390x CI * ci: add macos-15-intel for prebuilt binary (#2555) * Integration tests (#2564) * Fix code review. * Impl for COS. * build(deps): bump opendal from 0.54.0 to 0.55.0 * Move integration tests related stuff to subdir * Add Objective C Header for consistency * github action: fix the syntax - fails in the ci * sccache: prepare a new release * msvc: add msbuild support test * msvc: fix detect_showincludes_prefix with MSBuild * chore: update to gzp 2 * build(deps): bump rsa from 0.9.6 to 0.9.10 * codspeed: evaluate the memory benchmarking * remove too quick benchmarks * codspeed: move to simulation mode * Add realistic LRU cache access pattern benchmarks * Add compression characteristics benchmarks * Add build workflow simulation benchmarks * Add hash computation scenario benchmarks * Add batch cache entry benchmarks * Add cache artifact serialization benchmarks * Add /etc/ld.so.conf.d (if present) to compiler package * Assembly language support * fix(ci): pin serde_json to avoid zmij dependency * fix(ci): update zmij to fix s390x cross-compilation * Fix the run of the CI * run the benchmark in the ci * add benchmarks * dedup some code * Fix hash logging prefix * Add support for C preprocessor output * Add GCC pipe flag support * Improve save-temps gcc flags detection * MSVC: support forward slash as an output dir marker * add clang -fplugin=x regression test * canbeconcatenated is not accounted for in cmp * Reversed the order for looking `rustc`, added comment * Fix failing test_rlib_dep_reader_call for omit CARGO_HOME * fix: don't hash -parallel-jobs in Clang * docs: add installation steps for nix (#2523) * Support clang -fexperimental-assignment-tracking option (#2517) * add a nix flake (#2518) * Switch from the unmaintained daemonize crate to a maintained fork * chore: update to fs-err 3 * Fix grammar of error message * Add server name info to stderr of remote jobs that ran, but failed * Remove another pointless destructuring * try to unbreak the ci * fix s390x build error * Add riscv64 support * fix: make aarch64-pc-windows-msvc also zip not tar.gz * Free up disk space in CI * MSVC on Windows only * Avoid 'No space left on device' errors in CI * GitHub dropped macos-13 runners * Proper function pointer to int cast * Avoid unused structs with dist-server disabled * no check cfg (#2507) * chore: switch once_cell crate to standard library (#2499) * Avoid unreliable assert_cmd::cargo::cargo_bin (#2489) * Fix build on macOS which doesn't have separate 32-bit dirent (#2492) * Fix Clippy warnings (#2490) * docs: bump MSRV to 1.85.0 * msvc: handle '/FoRelease\' command-line argument * chore: drop tower dependency * chore: update to itertools 0.14 * Use generator in CMAKE_MSVC_DEBUG_INFORMATION_FORMAT in README * Update directories to 6.0 * Configuration.md - note logging env variables * chore: update to env_logger 0.11 * deps: update blake3 * prepare version 0.12.0 * Update README with winget installation instructions * Skip CARGO_BUILD_JOBS in hash keys * build(deps): bump object from 0.36.7 to 0.37.1 * Adjust tests after the rust update * Fix CI by adding cargo-features and updating coverage test to use modern -Cinstrument- coverage * Fix more clippy warnings * bump rustc in the ci too * Fix rustc 1.85 clippy warnings * bump to rustc 1.85 / edition 2024. mandatory for reqsign-core and run rustfmt with the version * fix clippy warnings * bump opendal to 0.54.0 & reqsign to 0.18.0 * github action: when creating a release, make it as draft before (#2458) * prepare version 0.11.0 (#2457) * document SCCACHE_LOG_MILLIS (#2456) * logging: add a option to log milliseconds (Closes: #2454) (#2455) * feat: handle human size prefixes (#2405) * fix: in stats, Compare values AND keys to have a fully deterministic order (#2403) * Add --diagnostic-width to test for args ignored in hash * Ignore --diagnostic-width argument when computing hash * build(deps): bump actions/checkout from 4 to 5 * build(deps): bump actions/download-artifact from 4 to 5 * build(deps): bump actions/github- script from 7 to 8 * Fix rustfmt * Fix comments on request * Fix clippy and rustfmt * Add test for count toolchain and use Determenistic for create tar archive * Fix mtime for reproducable toolchains * build(deps): bump chrono from 0.4.41 to 0.4.42 * fix typo in an environment variable name * Fix documentation of azure configuration * Account for clippy-driver having extra prefix `rustc` * Fix build on Android (in Termux) * add support for s390x build * chore: replace retry crate with backon * Remove or replace "Windows 2019" CI config * Needs another result unwrapping, it seems * Test: invoking symlink "compiler" to "sccache" invokes "compiler" * Add a comment about the problem with symlinks and current_exe() * Fix symbolic links to sccache on linux * Allow the CI configuration to disable clang++ for CUDA testing * Don't run tests using clang++ as CUDA compiler on Windows * add description to sccache-dist commands * Display a more user-friendly error when compiling on Linux/arm64 * Clarify documentation about "the hash" (aka cache key) * Remove stray ')' * Remove documentation for removed limitations of preprocessor cache mode * Fix preprocessor cache mode when the compiler outputs a dep file * Partially revert "Don't cache dep file (#2322)" * Do not disable preprocessor cache mode if there is a dep file * Fix preprocessor cache mode with distributed builds (#2173) * Change self of generate_hash_key() from Box to &mut Self * Remove a few IMO pointless indirections / aliases * Remove workaround for #2173 * Add test for bug #2173 * chore: fix some minor issues in comments * build(deps): bump chrono from 0.4.40 to 0.4.41 * build(deps): bump memchr from 2.7.1 to 2.7.5 * check if we can use a specific version of rust to build grcov * Move comment that hadn't moved with its corresponding code * Rework direct mode documentation some more * Explain what preprocessor cache mode really does * Reword and correct the preprocessor cache mode documentation * chore: Remove not working mozilla code * Add support for -fsanitize-ignorelist * github storage: adjust the doc * github storage: ACTIONS_CACHE_URL => ACTIONS_RESULTS_URL * github storage: force version 2 * Update codecov badge in README.md * Expand tests for dist-server * ci: Consolidate testing, coverage * ci: Update ubuntu-20.04 runners to ubuntu-22.04 * chore: fix some comments * Give the --dist-status user some information about when a retry will happen. * Add support for Xclang flag '-mrelax-all' * Add support for Xclang flag '-mconstructor-aliases' * feat(utils): Add support for object >= 0.33 * fix(tests): Remove executable bit from oauth.rs * build(deps): bump openssl from 0.10.64 to 0.10.72 * build(deps): bump tokio from 1.41.0 to 1.43.1 * Improve the CARGO_INCREMENTAL checking (#2364) * build(deps): bump chrono from 0.4.38 to 0.4.40 * build(deps): bump clap from 4.4.18 to 4.5.13 * build(deps): bump ring from 0.17.7 to 0.17.13 * Bail on `nvcc -time` and `nvcc -fdevice-time-trace` flags * test hip with librandomize_readdir * Add randomize_readdir test utility * fix non-strict HIP device lib order * Create config during testing to collect coverage data * Extend coverage to distributed tests * chore: replace num_cpus crate with available_parallelism in standard library (#2342) * Update CI coverage: grcov/codecov ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1793 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1793 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * sccache-debugsource-0.18.0~2-160000.1.1 * sccache-debuginfo-0.18.0~2-160000.1.1 * sccache-0.18.0~2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * sccache-debugsource-0.18.0~2-160000.1.1 * sccache-debuginfo-0.18.0~2-160000.1.1 * sccache-0.18.0~2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://www.suse.com/security/cve/CVE-2026-25727.html * https://www.suse.com/security/cve/CVE-2026-41676.html * https://www.suse.com/security/cve/CVE-2026-41677.html * https://www.suse.com/security/cve/CVE-2026-41678.html * https://www.suse.com/security/cve/CVE-2026-41681.html * https://www.suse.com/security/cve/CVE-2026-41898.html * https://www.suse.com/security/cve/CVE-2026-42327.html * https://www.suse.com/security/cve/CVE-2026-44662.html * https://www.suse.com/security/cve/CVE-2026-45784.html * https://www.suse.com/security/cve/CVE-2026-66746.html * https://www.suse.com/security/cve/CVE-2026-66754.html * https://www.suse.com/security/cve/CVE-2026-67181.html * https://www.suse.com/security/cve/CVE-2026-67182.html * https://www.suse.com/security/cve/CVE-2026-93599.html * https://www.suse.com/security/cve/CVE-2026-93600.html * https://www.suse.com/security/cve/CVE-2026-93601.html * https://www.suse.com/security/cve/CVE-2026-93602.html * https://bugzilla.suse.com/show_bug.cgi?id=1243868 * https://bugzilla.suse.com/show_bug.cgi?id=1257923 * https://bugzilla.suse.com/show_bug.cgi?id=1270206 * https://bugzilla.suse.com/show_bug.cgi?id=1270512 * https://bugzilla.suse.com/show_bug.cgi?id=1270559 * https://bugzilla.suse.com/show_bug.cgi?id=1270693 * https://bugzilla.suse.com/show_bug.cgi?id=1270736 * https://bugzilla.suse.com/show_bug.cgi?id=1270869 * https://bugzilla.suse.com/show_bug.cgi?id=1270938 * https://bugzilla.suse.com/show_bug.cgi?id=1270948 * https://bugzilla.suse.com/show_bug.cgi?id=1273881 * https://bugzilla.suse.com/show_bug.cgi?id=1273884 * https://bugzilla.suse.com/show_bug.cgi?id=1273886 * https://bugzilla.suse.com/show_bug.cgi?id=1273888 * https://bugzilla.suse.com/show_bug.cgi?id=1274146 * https://bugzilla.suse.com/show_bug.cgi?id=1282211 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:44:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:44:13 -0000 Subject: SUSE-SU-2026:23981-1: important: Security update for MozillaFirefox Message-ID: <179118985368.18075.124950268692471359@e7f4ad8d9866> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:23981-1 Release Date: 2026-09-30T13:07:26Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1791 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1791 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-160000.1.1 * MozillaFirefox-debuginfo-153.4.0-160000.1.1 * MozillaFirefox-debugsource-153.4.0-160000.1.1 * MozillaFirefox-translations-common-153.4.0-160000.1.1 * MozillaFirefox-153.4.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * MozillaFirefox-devel-153.4.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-160000.1.1 * MozillaFirefox-debuginfo-153.4.0-160000.1.1 * MozillaFirefox-debugsource-153.4.0-160000.1.1 * MozillaFirefox-translations-common-153.4.0-160000.1.1 * MozillaFirefox-153.4.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * MozillaFirefox-devel-153.4.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:45:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:45:14 -0000 Subject: SUSE-SU-2026:23980-1: moderate: Security update for glib2 Message-ID: <179118991437.18075.17275830590259668354@e7f4ad8d9866> # Security update for glib2 Announcement ID: SUSE-SU-2026:23980-1 Release Date: 2026-09-30T09:36:48Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1788 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1788 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * glib2-debugsource-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * libgthread-2_0-0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-devel-debuginfo-2.84.4-160000.5.1 * libgirepository-2_0-0-2.84.4-160000.5.1 * glib2-devel-static-2.84.4-160000.5.1 * glib2-devel-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgthread-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GLibUnix-2_0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * glib2-doc-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GIRepository-3_0-2.84.4-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * glib2-lang-2.84.4-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * glib2-debugsource-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * libgthread-2_0-0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-devel-debuginfo-2.84.4-160000.5.1 * libgirepository-2_0-0-2.84.4-160000.5.1 * glib2-devel-static-2.84.4-160000.5.1 * glib2-devel-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgthread-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GLibUnix-2_0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * glib2-doc-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GIRepository-3_0-2.84.4-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * glib2-lang-2.84.4-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:47:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:47:54 -0000 Subject: SUSE-SU-2026:4439-1: important: Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5) Message-ID: <179119007494.18075.17302706257536518409@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 74 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4439-1 Release Date: 2026-10-04T12:04:23Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.280 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4439 SUSE-SLE-Live- Patching-12-SP5-2026-4438 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_280-default-14-2.1 * kgraft-patch-4_12_14-122_275-default-16-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:50:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:50:15 -0000 Subject: SUSE-SU-2026:23975-1: moderate: Security update for wget Message-ID: <179119021570.18075.14517143240647907309@e7f4ad8d9866> # Security update for wget Announcement ID: SUSE-SU-2026:23975-1 Release Date: 2026-10-01T12:39:02Z Rating: moderate References: * bsc#1276962 Cross-References: * CVE-2026-16599 CVSS scores: * CVE-2026-16599 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-16599 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-16599 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for wget fixes the following issue: * CVE-2026-16599: server-controlled unbounded MD5 loop in FTP OPIE (bsc#1276962). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1802 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wget-debugsource-1.25.0-160000.4.1 * wget-1.25.0-160000.4.1 * wget-debuginfo-1.25.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16599.html * https://bugzilla.suse.com/show_bug.cgi?id=1276962 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:52:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:52:10 -0000 Subject: SUSE-SU-2026:23973-1: important: Security update for helm Message-ID: <179119033041.18075.10286070162919368632@e7f4ad8d9866> # Security update for helm Announcement ID: SUSE-SU-2026:23973-1 Release Date: 2026-09-30T17:43:36Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-78662 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families (bsc#1281426). * CVE-2026-56855: golang.org/x/crypto/ssh: prevent DoS on deadlocked established channel (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-78662: golang.org/x/crypto/ssh: prevent DoS on deadlocked undecided channel (bsc#1281426). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1794 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-4.3.0-160000.1.1 * helm-4.3.0-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * helm-bash-completion-4.3.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:53:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:53:48 -0000 Subject: SUSE-SU-2026:23971-1: moderate: Security update for glib2 Message-ID: <179119042831.18075.12066738118107572886@e7f4ad8d9866> # Security update for glib2 Announcement ID: SUSE-SU-2026:23971-1 Release Date: 2026-09-30T09:50:09Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1788 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libgirepository-2_0-0-2.84.4-160000.5.1 * typelib-1_0-GObject-2_0-2.84.4-160000.5.1 * glib2-tools-2.84.4-160000.5.1 * glib2-debugsource-2.84.4-160000.5.1 * libglib-2_0-0-2.84.4-160000.5.1 * libgobject-2_0-0-2.84.4-160000.5.1 * typelib-1_0-Gio-2_0-2.84.4-160000.5.1 * libgirepository-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GLib-2_0-2.84.4-160000.5.1 * libgio-2_0-0-2.84.4-160000.5.1 * libglib-2_0-0-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-debuginfo-2.84.4-160000.5.1 * libgio-2_0-0-debuginfo-2.84.4-160000.5.1 * glib2-tools-debuginfo-2.84.4-160000.5.1 * libgmodule-2_0-0-2.84.4-160000.5.1 * libgobject-2_0-0-debuginfo-2.84.4-160000.5.1 * typelib-1_0-GModule-2_0-2.84.4-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 08:56:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 08:56:11 -0000 Subject: SUSE-SU-2026:4436-1: important: Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) Message-ID: <179119057141.18075.17480416657701065500@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4436-1 Release Date: 2026-10-02T18:33:49Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.272 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4436 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_272-default-18-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 12:30:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 12:30:37 -0000 Subject: SUSE-SU-2026:4441-1: important: Security update for kubevirt-1.6 Message-ID: <179120343795.18476.1136185421005146467@32be4de442c6> # Security update for kubevirt-1.6 Announcement ID: SUSE-SU-2026:4441-1 Release Date: 2026-10-05T07:13:35Z Rating: important References: * bsc#1276520 Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for kubevirt-1.6 fixes the following issues: * Package the persistent-reservation helper's entrypoint script (bsc#1276520): virt-operator runs the pr-helper container with the command /entrypoint.sh, which symlinks the multipath socket into place and then execs qemu-pr- helper. Only multipath.conf was installed, so the container could not start and persistent reservation was unavailable. The script is upstream in cmd/pr-helper/entrypoint.sh. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4441 ## Package List: * Containers Module 15-SP7 (aarch64 x86_64) * kubevirt-1.6-manifests-1.6.6-150700.15.20.1 * kubevirt-1.6-virtctl-1.6.6-150700.15.20.1 * kubevirt-1.6-virtctl-debuginfo-1.6.6-150700.15.20.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1276520 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 12:31:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 12:31:31 -0000 Subject: SUSE-SU-2026:3961-2: moderate: Security update for suseconnect-ng Message-ID: <179120349195.18476.14776597457878858363@32be4de442c6> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:3961-2 Release Date: 2026-10-04T20:34:47Z Rating: moderate References: * bsc#1159776 * bsc#1267478 * bsc#1268596 * bsc#1268900 * bsc#1270392 Affected Products: * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has five security fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issue: * Update version to 1.23.0: * Use product identifier for product migrations. (bsc#1268596) * Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC-843, bsc#1268900). * Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed. (bsc#1159776) * InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478). * Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages. (jsc#TEL-298) * Allow deregsiter when subscribed regcode has expired (bsc#1270392, jsc#865) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-3961 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-3961 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * suseconnect-ng-1.23.0-150600.3.24.1 * libsuseconnect-1.23.0-150600.3.24.1 * suseconnect-ruby-bindings-1.23.0-150600.3.24.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ng-1.23.0-150600.3.24.1 * libsuseconnect-1.23.0-150600.3.24.1 * suseconnect-ruby-bindings-1.23.0-150600.3.24.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1159776 * https://bugzilla.suse.com/show_bug.cgi?id=1267478 * https://bugzilla.suse.com/show_bug.cgi?id=1268596 * https://bugzilla.suse.com/show_bug.cgi?id=1268900 * https://bugzilla.suse.com/show_bug.cgi?id=1270392 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:31:04 -0000 Subject: SUSE-SU-2026:4471-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7) Message-ID: <179121786418.19502.8474946956951923800@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4471-1 Release Date: 2026-10-05T12:06:32Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.25 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4482 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4474 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4483 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4471 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4470 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4467 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4473 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4466 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4476 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4472 SUSE- SLE-Module-Live-Patching-15-SP6-2026-4484 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4475 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4482 SUSE-2026-4474 SUSE-2026-4483 SUSE-2026-4471 SUSE-2026-4470 SUSE-2026-4467 SUSE-2026-4473 SUSE-2026-4466 SUSE-2026-4476 SUSE-2026-4472 SUSE-2026-4484 SUSE-2026-4475 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4480 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_78-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-12-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_17-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-9-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-18-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_78-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-12-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-12-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_17-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-18-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-6-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-9-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-6-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-18-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_25-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_7-debugsource-13-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:32:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:32:16 -0000 Subject: SUSE-SU-2026:4450-1: important: Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Message-ID: <179121793612.19502.9239960906542933953@e7f4ad8d9866> # Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4450-1 Release Date: 2026-10-05T12:06:49Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4450 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4453 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4455 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4461 SUSE- SLE-Module-Live-Patching-15-SP4-2026-4452 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4451 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4459 SUSE- SLE-Module-Live-Patching-15-SP4-2026-4460 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4454 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4478 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4450 SUSE-2026-4453 SUSE-2026-4455 SUSE-2026-4461 SUSE-2026-4452 SUSE-2026-4451 SUSE-2026-4459 SUSE-2026-4460 SUSE-2026-4454 SUSE-2026-4478 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4469 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4468 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4477 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4465 SUSE- SLE-Module-Live-Patching-15-SP5-2026-4479 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4485 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4481 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4469 SUSE-2026-4468 SUSE-2026-4477 SUSE-2026-4465 SUSE-2026-4479 SUSE-2026-4485 SUSE-2026-4481 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_209-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-20-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-14-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_209-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-20-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-14-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-20-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-18-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-12-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-14-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-14-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_36-debugsource-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_37-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-10-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_31-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-13-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-13-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-14-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_36-debugsource-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_37-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-8-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-10-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:34:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:34:43 -0000 Subject: SUSE-SU-2026:4458-1: important: Security update for pcre2 Message-ID: <179121808372.19502.15894019375524340535@e7f4ad8d9866> # Security update for pcre2 Announcement ID: SUSE-SU-2026:4458-1 Release Date: 2026-10-05T10:52:03Z Rating: important References: * bsc#1277707 * bsc#1277708 * bsc#1277709 * bsc#1277710 * bsc#1277711 * bsc#1277713 * bsc#1279893 * bsc#1280050 * bsc#1280051 * bsc#1280052 * bsc#1280053 * bsc#1280054 Cross-References: * CVE-2026-86145 * CVE-2026-89156 * CVE-2026-89157 * CVE-2026-89158 * CVE-2026-89160 * CVE-2026-89161 CVSS scores: * CVE-2026-86145 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-86145 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-86145 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89156 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89156 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89156 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89156 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89157 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89157 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89157 ( NVD ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89157 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89158 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89158 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89158 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89158 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89160 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89160 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89160 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-89160 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89161 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89161 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89161 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities and has six security fixes can now be installed. ## Description: This update for pcre2 fixes the following issues: * CVE-2026-86145: missing size checks in `pcre2_dfa_match` code can lead to an out-of-bounds write (bsc#1279893). * CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback (bsc#1280054). * CVE-2026-89157: out-of-bounds write via large pattern input (bsc#1280053). * CVE-2026-89158: out-of-bounds write due to integer overflow in `pcre2_compile_32` for 32-bit platforms (bsc#1280052). * CVE-2026-89160: out-of-bounds read during the `PCRE2_MATCH_INVALID_UTF` matching of an invalid UTF subject (bsc#1280051). * CVE-2026-89161: incorrect free operation due to mishandling of a previously copied subject in `pcre2_jit_match` (bsc#1280050). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4458 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4458 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4458 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4458 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4458 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4458 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4458 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4458 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4458 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4458 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4458 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4458 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4458 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4458 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-tools-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * pcre2-tools-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * pcre2-devel-static-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * openSUSE Leap 15.4 (x86_64) * libpcre2-8-0-32bit-10.39-150400.4.12.1 * libpcre2-16-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-32-0-32bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-32bit-10.39-150400.4.12.1 * libpcre2-32-0-32bit-10.39-150400.4.12.1 * libpcre2-16-0-32bit-10.39-150400.4.12.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpcre2-16-0-64bit-10.39-150400.4.12.1 * libpcre2-32-0-64bit-10.39-150400.4.12.1 * libpcre2-8-0-64bit-10.39-150400.4.12.1 * libpcre2-16-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-64bit-10.39-150400.4.12.1 * libpcre2-8-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-32-0-64bit-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-64bit-debuginfo-10.39-150400.4.12.1 * openSUSE Leap 15.4 (noarch) * pcre2-doc-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * pcre2-devel-10.39-150400.4.12.1 * libpcre2-16-0-10.39-150400.4.12.1 * libpcre2-32-0-debuginfo-10.39-150400.4.12.1 * pcre2-debugsource-10.39-150400.4.12.1 * libpcre2-posix2-debuginfo-10.39-150400.4.12.1 * libpcre2-16-0-debuginfo-10.39-150400.4.12.1 * libpcre2-posix2-10.39-150400.4.12.1 * libpcre2-32-0-10.39-150400.4.12.1 * libpcre2-8-0-debuginfo-10.39-150400.4.12.1 * libpcre2-8-0-10.39-150400.4.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86145.html * https://www.suse.com/security/cve/CVE-2026-89156.html * https://www.suse.com/security/cve/CVE-2026-89157.html * https://www.suse.com/security/cve/CVE-2026-89158.html * https://www.suse.com/security/cve/CVE-2026-89160.html * https://www.suse.com/security/cve/CVE-2026-89161.html * https://bugzilla.suse.com/show_bug.cgi?id=1277707 * https://bugzilla.suse.com/show_bug.cgi?id=1277708 * https://bugzilla.suse.com/show_bug.cgi?id=1277709 * https://bugzilla.suse.com/show_bug.cgi?id=1277710 * https://bugzilla.suse.com/show_bug.cgi?id=1277711 * https://bugzilla.suse.com/show_bug.cgi?id=1277713 * https://bugzilla.suse.com/show_bug.cgi?id=1279893 * https://bugzilla.suse.com/show_bug.cgi?id=1280050 * https://bugzilla.suse.com/show_bug.cgi?id=1280051 * https://bugzilla.suse.com/show_bug.cgi?id=1280052 * https://bugzilla.suse.com/show_bug.cgi?id=1280053 * https://bugzilla.suse.com/show_bug.cgi?id=1280054 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:35:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:35:41 -0000 Subject: SUSE-SU-2026:4457-1: important: Security update for rpm Message-ID: <179121814105.19502.6460900963574299594@e7f4ad8d9866> # Security update for rpm Announcement ID: SUSE-SU-2026:4457-1 Release Date: 2026-10-05T10:50:29Z Rating: important References: * bsc#1240054 * bsc#1269584 Cross-References: * CVE-2026-44605 CVSS scores: * CVE-2026-44605 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-44605 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-44605 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro for Rancher 5.3 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for rpm fixes the following issue: Security issues fixed: * CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table (bsc#1269584). Other updates and bugfixes: * Fix `libelf` handle not being closed, resulting in build errors when using a NFS buildroot (bsc#1240054). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4457 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4457 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4457 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-devel-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-build-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-build-debuginfo-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python2-rpm-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 * python2-rpm-debuginfo-4.14.3-150300.58.1 * openSUSE Leap 15.3 (x86_64) * rpm-32bit-debuginfo-4.14.3-150300.58.1 * rpm-ndb-32bit-4.14.3-150300.58.1 * rpm-ndb-32bit-debuginfo-4.14.3-150300.58.1 * rpm-32bit-4.14.3-150300.58.1 * openSUSE Leap 15.3 (aarch64_ilp32) * rpm-ndb-64bit-4.14.3-150300.58.1 * rpm-64bit-4.14.3-150300.58.1 * rpm-ndb-64bit-debuginfo-4.14.3-150300.58.1 * rpm-64bit-debuginfo-4.14.3-150300.58.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python-rpm-debugsource-4.14.3-150300.58.1 * rpm-debuginfo-4.14.3-150300.58.1 * python3-rpm-debuginfo-4.14.3-150300.58.1 * rpm-debugsource-4.14.3-150300.58.1 * rpm-ndb-debuginfo-4.14.3-150300.58.1 * rpm-ndb-debugsource-4.14.3-150300.58.1 * rpm-ndb-4.14.3-150300.58.1 * python3-rpm-4.14.3-150300.58.1 * rpm-4.14.3-150300.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44605.html * https://bugzilla.suse.com/show_bug.cgi?id=1240054 * https://bugzilla.suse.com/show_bug.cgi?id=1269584 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:36:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:36:38 -0000 Subject: SUSE-SU-2026:4456-1: moderate: Security update for sssd Message-ID: <179121819807.19502.496931809963195647@e7f4ad8d9866> # Security update for sssd Announcement ID: SUSE-SU-2026:4456-1 Release Date: 2026-10-05T10:49:55Z Rating: moderate References: * bsc#1269807 * bsc#1273925 Cross-References: * CVE-2026-12610 * CVE-2026-68743 CVSS scores: * CVE-2026-12610 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-12610 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-12610 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68743 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68743 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68743 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68743 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for sssd fixes the following issues: * CVE-2026-68743: insufficient validation in the PAM responder can lead to an out-of-bounds read and a process crash when a crafted protocol v1 request is processed (bsc#1273925). * CVE-2026-12610: cancelled or completed PAM request while the asynchronous child process is still running can lead to a use-after-free (bsc#1269807). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4456 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4456 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * libnfsidmap-sss-2.5.2-150500.10.49.1 * sssd-proxy-debuginfo-2.5.2-150500.10.49.1 * libsss_nss_idmap0-2.5.2-150500.10.49.1 * sssd-dbus-2.5.2-150500.10.49.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libipa_hbac0-2.5.2-150500.10.49.1 * libsss_certmap0-2.5.2-150500.10.49.1 * sssd-kcm-debuginfo-2.5.2-150500.10.49.1 * python3-sssd-config-debuginfo-2.5.2-150500.10.49.1 * python3-sss_nss_idmap-2.5.2-150500.10.49.1 * libsss_certmap-devel-2.5.2-150500.10.49.1 * sssd-debugsource-2.5.2-150500.10.49.1 * sssd-krb5-common-2.5.2-150500.10.49.1 * libnfsidmap-sss-debuginfo-2.5.2-150500.10.49.1 * libsss_simpleifp-devel-2.5.2-150500.10.49.1 * sssd-common-2.5.2-150500.10.49.1 * sssd-winbind-idmap-debuginfo-2.5.2-150500.10.49.1 * sssd-kcm-2.5.2-150500.10.49.1 * libipa_hbac-devel-2.5.2-150500.10.49.1 * sssd-tools-2.5.2-150500.10.49.1 * sssd-ad-debuginfo-2.5.2-150500.10.49.1 * sssd-proxy-2.5.2-150500.10.49.1 * sssd-ipa-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.49.1 * python3-sss_nss_idmap-debuginfo-2.5.2-150500.10.49.1 * sssd-2.5.2-150500.10.49.1 * sssd-krb5-debuginfo-2.5.2-150500.10.49.1 * sssd-winbind-idmap-2.5.2-150500.10.49.1 * sssd-dbus-debuginfo-2.5.2-150500.10.49.1 * python3-sss-murmur-2.5.2-150500.10.49.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.49.1 * python3-ipa_hbac-debuginfo-2.5.2-150500.10.49.1 * libsss_nss_idmap-devel-2.5.2-150500.10.49.1 * libsss_idmap-devel-2.5.2-150500.10.49.1 * libsss_idmap0-2.5.2-150500.10.49.1 * libsss_simpleifp0-debuginfo-2.5.2-150500.10.49.1 * sssd-ad-2.5.2-150500.10.49.1 * python3-ipa_hbac-2.5.2-150500.10.49.1 * sssd-ldap-2.5.2-150500.10.49.1 * libipa_hbac0-debuginfo-2.5.2-150500.10.49.1 * python3-sssd-config-2.5.2-150500.10.49.1 * libsss_simpleifp0-2.5.2-150500.10.49.1 * sssd-ipa-2.5.2-150500.10.49.1 * python3-sss-murmur-debuginfo-2.5.2-150500.10.49.1 * sssd-tools-debuginfo-2.5.2-150500.10.49.1 * sssd-krb5-2.5.2-150500.10.49.1 * sssd-ldap-debuginfo-2.5.2-150500.10.49.1 * sssd-common-debuginfo-2.5.2-150500.10.49.1 * openSUSE Leap 15.5 (x86_64) * sssd-common-32bit-debuginfo-2.5.2-150500.10.49.1 * sssd-common-32bit-2.5.2-150500.10.49.1 * openSUSE Leap 15.5 (aarch64_ilp32) * sssd-common-64bit-debuginfo-2.5.2-150500.10.49.1 * sssd-common-64bit-2.5.2-150500.10.49.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsss_nss_idmap0-2.5.2-150500.10.49.1 * sssd-dbus-2.5.2-150500.10.49.1 * libsss_nss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-2.5.2-150500.10.49.1 * sssd-debugsource-2.5.2-150500.10.49.1 * sssd-krb5-common-2.5.2-150500.10.49.1 * sssd-common-2.5.2-150500.10.49.1 * sssd-tools-2.5.2-150500.10.49.1 * sssd-ad-debuginfo-2.5.2-150500.10.49.1 * libsss_certmap0-debuginfo-2.5.2-150500.10.49.1 * sssd-2.5.2-150500.10.49.1 * sssd-krb5-debuginfo-2.5.2-150500.10.49.1 * sssd-krb5-common-debuginfo-2.5.2-150500.10.49.1 * libsss_idmap0-2.5.2-150500.10.49.1 * sssd-ad-2.5.2-150500.10.49.1 * sssd-ldap-2.5.2-150500.10.49.1 * python3-sssd-config-2.5.2-150500.10.49.1 * sssd-krb5-2.5.2-150500.10.49.1 * sssd-ldap-debuginfo-2.5.2-150500.10.49.1 * sssd-common-debuginfo-2.5.2-150500.10.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12610.html * https://www.suse.com/security/cve/CVE-2026-68743.html * https://bugzilla.suse.com/show_bug.cgi?id=1269807 * https://bugzilla.suse.com/show_bug.cgi?id=1273925 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:37:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:37:34 -0000 Subject: SUSE-SU-2026:4447-1: low: Security update for cups Message-ID: <179121825446.19502.11313057297538887744@e7f4ad8d9866> # Security update for cups Announcement ID: SUSE-SU-2026:4447-1 Release Date: 2026-10-05T08:21:09Z Rating: low References: * bsc#1263116 Cross-References: * CVE-2026-41079 CVSS scores: * CVE-2026-41079 ( SUSE ): 5.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41079 ( SUSE ): 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41079 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41079 ( NVD ): 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cups fixes the following issue: * CVE-2026-41079: crafted SNMP response can lead to stack-based out-of-bounds read and sensitive memory disclosure (bsc#1263116). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4447 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cups-debuginfo-1.7.5-20.73.1 * cups-libs-debuginfo-1.7.5-20.73.1 * cups-libs-1.7.5-20.73.1 * cups-libs-debuginfo-32bit-1.7.5-20.73.1 * cups-libs-32bit-1.7.5-20.73.1 * cups-client-1.7.5-20.73.1 * cups-devel-1.7.5-20.73.1 * cups-1.7.5-20.73.1 * cups-debugsource-1.7.5-20.73.1 * cups-client-debuginfo-1.7.5-20.73.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41079.html * https://bugzilla.suse.com/show_bug.cgi?id=1263116 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:38:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:38:14 -0000 Subject: SUSE-SU-2026:4446-1: important: Security update for rpcbind Message-ID: <179121829412.19502.17487771405961806237@e7f4ad8d9866> # Security update for rpcbind Announcement ID: SUSE-SU-2026:4446-1 Release Date: 2026-10-05T08:20:57Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4446 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4446 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-24.18.1 * rpcbind-0.2.3-24.18.1 * rpcbind-debugsource-0.2.3-24.18.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * rpcbind-debuginfo-0.2.3-24.18.1 * rpcbind-0.2.3-24.18.1 * rpcbind-debugsource-0.2.3-24.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:38:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:38:53 -0000 Subject: SUSE-SU-2026:4445-1: moderate: Security update for rubygem-rails-html-sanitizer Message-ID: <179121833310.19502.9827352225277515682@e7f4ad8d9866> # Security update for rubygem-rails-html-sanitizer Announcement ID: SUSE-SU-2026:4445-1 Release Date: 2026-10-05T08:20:40Z Rating: moderate References: * bsc#1275199 Cross-References: * CVE-2026-73648 CVSS scores: * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Availability Extension 15 SP5 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for rubygem-rails-html-sanitizer fixes the following issue: * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275199). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP5 zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4445 * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4445 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * ruby2.5-rubygem-rails-html-sanitizer-1.0.4-150000.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1275199 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:39:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:39:35 -0000 Subject: SUSE-SU-2026:4444-1: critical: Security update for terraform-provider-susepubliccloud Message-ID: <179121837583.19502.15541894784674703495@e7f4ad8d9866> # Security update for terraform-provider-susepubliccloud Announcement ID: SUSE-SU-2026:4444-1 Release Date: 2026-10-05T08:19:35Z Rating: critical References: * bsc#1278763 * bsc#1279072 * bsc#1279252 * bsc#1280841 Cross-References: * CVE-2026-84303 * CVE-2026-84304 * CVE-2026-84445 * CVE-2026-88922 CVSS scores: * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-88922 ( SUSE ): 5.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88922 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88922 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves four vulnerabilities can now be installed. ## Description: This update for terraform-provider-susepubliccloud fixes the following issues: * CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279252). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279072). * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278763). * CVE-2026-88922: github.com/hashicorp/go-getter: improper metadata handling in archive decompression allows for creation of files with elevated permission bits and possible LPE (bsc#1280841). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4444 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4444 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * terraform-provider-susepubliccloud-0.0.1-150100.3.26.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * terraform-provider-susepubliccloud-0.0.1-150100.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://www.suse.com/security/cve/CVE-2026-84445.html * https://www.suse.com/security/cve/CVE-2026-88922.html * https://bugzilla.suse.com/show_bug.cgi?id=1278763 * https://bugzilla.suse.com/show_bug.cgi?id=1279072 * https://bugzilla.suse.com/show_bug.cgi?id=1279252 * https://bugzilla.suse.com/show_bug.cgi?id=1280841 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:40:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:40:15 -0000 Subject: SUSE-SU-2026:4443-1: important: Security update for python-msgpack Message-ID: <179121841534.19502.10143067883606938268@e7f4ad8d9866> # Security update for python-msgpack Announcement ID: SUSE-SU-2026:4443-1 Release Date: 2026-10-05T08:18:51Z Rating: important References: * bsc#1269947 Cross-References: * CVE-2026-57585 CVSS scores: * CVE-2026-57585 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-57585 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-msgpack fixes the following issue * CVE-2026-57585: `Unpacker` reuse after a caught error can lead to an out-of- bounds read and a crash (bsc#1269947). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4443 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4443 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4443 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4443 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python311-msgpack-1.0.7-150600.3.5.1 * python-msgpack-debugsource-1.0.7-150600.3.5.1 * python311-msgpack-debuginfo-1.0.7-150600.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-57585.html * https://bugzilla.suse.com/show_bug.cgi?id=1269947 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 16:41:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 16:41:12 -0000 Subject: SUSE-SU-2026:4442-1: moderate: Security update for perl-DBI Message-ID: <179121847261.19502.121631311728935487@e7f4ad8d9866> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4442-1 Release Date: 2026-10-05T08:18:25Z Rating: moderate References: * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4442 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * perl-DBI-debuginfo-1.628-5.29.1 * perl-DBI-1.628-5.29.1 * perl-DBI-debugsource-1.628-5.29.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:30:49 -0000 Subject: SUSE-SU-2026:4514-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123224980.29870.18098550061941125995@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4514-1 Release Date: 2026-10-05T15:35:52Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4514 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_78-default-debuginfo-3-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-3-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_20-debugsource-3-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:31:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:31:48 -0000 Subject: SUSE-SU-2026:4513-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123230858.29870.793319229109657291@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4513-1 Release Date: 2026-10-05T15:35:41Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4513 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_73-default-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-debuginfo-4-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_19-debugsource-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:32:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:32:51 -0000 Subject: SUSE-SU-2026:4498-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Message-ID: <179123237199.29870.2173107540933334928@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4498-1 Release Date: 2026-10-05T13:34:45Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4498 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4498 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_125-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-4-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_125-default-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-4-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:33:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:33:56 -0000 Subject: SUSE-SU-2026:4497-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123243699.29870.9010821172515250887@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4497-1 Release Date: 2026-10-05T13:34:28Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4497 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4497 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-3-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-3-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-3-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:35:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:35:07 -0000 Subject: SUSE-SU-2026:4495-1: important: Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123250711.29870.15341233838924275371@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4495-1 Release Date: 2026-10-05T14:04:13Z Rating: important References: * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4499 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4495 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4499 SUSE-2026-4495 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-4-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-4-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-4-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-4-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:36:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:36:26 -0000 Subject: SUSE-SU-2026:4489-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123258662.29870.7661327817817755874@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4489-1 Release Date: 2026-10-05T15:35:03Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4489 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4489 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4503 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4496 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4504 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4505 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4506 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4508 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4509 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4510 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-15-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-15-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-15-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-15-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-15-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_31-default-12-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-debuginfo-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-debuginfo-12-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_10-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-8-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_8-debugsource-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_15-debugsource-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_12-debugsource-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-7-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_11-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-debuginfo-10-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_13-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_14-debugsource-7-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_9-debugsource-12-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-debuginfo-10-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:37:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:37:45 -0000 Subject: SUSE-SU-2026:4511-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Message-ID: <179123266595.29870.9257513574325203009@c47cdf24d69a> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4511-1 Release Date: 2026-10-05T15:35:26Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4511 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4512 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4487 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_63-default-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-5-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_17-debugsource-5-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_16-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-6-150700.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_59-rt-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_16-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-6-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:38:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:38:41 -0000 Subject: SUSE-SU-2026:4507-1: important: Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5) Message-ID: <179123272194.29870.7829123977860262414@c47cdf24d69a> # Security update for the Linux Kernel (Live Patch 41 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4507-1 Release Date: 2026-10-05T15:34:31Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.169 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4507 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4507 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4486 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4490 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4488 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4490 SUSE-2026-4488 SUSE-2026-4486 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-7-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-6-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-6-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-6-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-6-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:39:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:39:42 -0000 Subject: SUSE-SU-2026:4515-1: moderate: Security update for java-11-openjdk Message-ID: <179123278238.29870.7425561412044796955@c47cdf24d69a> # Security update for java-11-openjdk Announcement ID: SUSE-SU-2026:4515-1 Release Date: 2026-10-05T15:41:51Z Rating: moderate References: * bsc#1275035 * bsc#1275764 * bsc#1275777 * bsc#1275778 Cross-References: * CVE-2026-60589 * CVE-2026-61308 * CVE-2026-70907 CVSS scores: * CVE-2026-60589 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-60589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-61308 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-61308 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-70907 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-70907 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for java-11-openjdk fixes the following issues: * CVE-2026-60589: improve resource resolving (bsc#1275777). * CVE-2026-61308: enhance HTTP connections (bsc#1275778). * CVE-2026-70907: enhance TLS server (bsc#1275764). Changes for java-11-openjdk: * Upgrade to jdk-11.0.32.1+1 (August 2026 CSPU) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4515 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4515 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * java-11-openjdk-devel-11.0.32.1-3.105.1 * java-11-openjdk-debugsource-11.0.32.1-3.105.1 * java-11-openjdk-demo-11.0.32.1-3.105.1 * java-11-openjdk-headless-11.0.32.1-3.105.1 * java-11-openjdk-11.0.32.1-3.105.1 * java-11-openjdk-debuginfo-11.0.32.1-3.105.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * java-11-openjdk-devel-11.0.32.1-3.105.1 * java-11-openjdk-debugsource-11.0.32.1-3.105.1 * java-11-openjdk-demo-11.0.32.1-3.105.1 * java-11-openjdk-headless-11.0.32.1-3.105.1 * java-11-openjdk-11.0.32.1-3.105.1 * java-11-openjdk-debuginfo-11.0.32.1-3.105.1 ## References: * https://www.suse.com/security/cve/CVE-2026-60589.html * https://www.suse.com/security/cve/CVE-2026-61308.html * https://www.suse.com/security/cve/CVE-2026-70907.html * https://bugzilla.suse.com/show_bug.cgi?id=1275035 * https://bugzilla.suse.com/show_bug.cgi?id=1275764 * https://bugzilla.suse.com/show_bug.cgi?id=1275777 * https://bugzilla.suse.com/show_bug.cgi?id=1275778 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:40:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:40:25 -0000 Subject: SUSE-SU-2026:4502-1: important: Security update for libX11 Message-ID: <179123282538.29870.8289562346749497354@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4502-1 Release Date: 2026-10-05T15:04:05Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4502 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libX11-xcb1-1.8.10-150700.4.8.1 * libX11-6-debuginfo-1.8.10-150700.4.8.1 * libX11-devel-1.8.10-150700.4.8.1 * libX11-xcb1-debuginfo-1.8.10-150700.4.8.1 * libX11-debugsource-1.8.10-150700.4.8.1 * libX11-6-1.8.10-150700.4.8.1 * Basesystem Module 15-SP7 (x86_64) * libX11-xcb1-32bit-1.8.10-150700.4.8.1 * libX11-xcb1-32bit-debuginfo-1.8.10-150700.4.8.1 * libX11-6-32bit-1.8.10-150700.4.8.1 * libX11-6-32bit-debuginfo-1.8.10-150700.4.8.1 * Basesystem Module 15-SP7 (noarch) * libX11-data-1.8.10-150700.4.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:41:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:41:08 -0000 Subject: SUSE-SU-2026:4501-1: important: Security update for libX11 Message-ID: <179123286835.29870.3736444990382301562@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4501-1 Release Date: 2026-10-05T15:03:26Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4501 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4501 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4501 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libX11-data-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (x86_64) * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-devel-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libX11-6-64bit-1.8.7-150600.3.11.1 * libX11-xcb1-64bit-debuginfo-1.8.7-150600.3.11.1 * libX11-devel-64bit-1.8.7-150600.3.11.1 * libX11-xcb1-64bit-1.8.7-150600.3.11.1 * libX11-6-64bit-debuginfo-1.8.7-150600.3.11.1 * openSUSE Leap 15.6 (noarch) * libX11-data-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libX11-devel-1.8.7-150600.3.11.1 * libX11-6-1.8.7-150600.3.11.1 * libX11-6-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-1.8.7-150600.3.11.1 * libX11-xcb1-debuginfo-1.8.7-150600.3.11.1 * libX11-debugsource-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libX11-data-1.8.7-150600.3.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libX11-xcb1-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-xcb1-32bit-1.8.7-150600.3.11.1 * libX11-6-32bit-debuginfo-1.8.7-150600.3.11.1 * libX11-6-32bit-1.8.7-150600.3.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:42:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:42:08 -0000 Subject: SUSE-SU-2026:4500-1: important: Security update for libX11 Message-ID: <179123292813.29870.10193860650847293030@c47cdf24d69a> # Security update for libX11 Announcement ID: SUSE-SU-2026:4500-1 Release Date: 2026-10-05T15:03:01Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4500 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4500 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4500 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4500 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4500 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4500 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4500 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4500 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4500 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4500 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4500 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4500 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4500 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libX11-data-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libX11-6-debuginfo-1.6.5-150000.3.41.1 * libX11-6-1.6.5-150000.3.41.1 * libX11-xcb1-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-1.6.5-150000.3.41.1 * libX11-devel-1.6.5-150000.3.41.1 * libX11-debugsource-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libX11-6-32bit-debuginfo-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-1.6.5-150000.3.41.1 * libX11-6-32bit-1.6.5-150000.3.41.1 * libX11-xcb1-32bit-debuginfo-1.6.5-150000.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libX11-data-1.6.5-150000.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:42:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:42:50 -0000 Subject: SUSE-SU-2026:4494-1: important: Security update for wpa_supplicant Message-ID: <179123297017.29870.4962982173601992075@c47cdf24d69a> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4494-1 Release Date: 2026-10-05T13:23:04Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). * Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4494 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4494 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debuginfo-2.9-23.26.1 * wpa_supplicant-2.9-23.26.1 * wpa_supplicant-debugsource-2.9-23.26.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * wpa_supplicant-debuginfo-2.9-23.26.1 * wpa_supplicant-2.9-23.26.1 * wpa_supplicant-debugsource-2.9-23.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:43:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:43:29 -0000 Subject: SUSE-SU-2026:4493-1: important: Security update for valkey Message-ID: <179123300938.29870.13223856875170093187@c47cdf24d69a> # Security update for valkey Announcement ID: SUSE-SU-2026:4493-1 Release Date: 2026-10-05T13:22:49Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4493 ## Package List: * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * valkey-debuginfo-8.0.10-150700.3.26.1 * valkey-devel-8.0.10-150700.3.26.1 * valkey-debugsource-8.0.10-150700.3.26.1 * valkey-8.0.10-150700.3.26.1 * Server Applications Module 15-SP7 (noarch) * valkey-compat-redis-8.0.10-150700.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:44:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:44:08 -0000 Subject: SUSE-SU-2026:4492-1: important: Security update for wpa_supplicant Message-ID: <179123304871.29870.11444471343451860299@c47cdf24d69a> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4492-1 Release Date: 2026-10-05T13:22:34Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2025-24912 * CVE-2026-78807 CVSS scores: * CVE-2025-24912 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-24912 ( NVD ): 3.7 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4492 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4492 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4492 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * wpa_supplicant-gui-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-gui-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.10-150600.7.11.1 * wpa_supplicant-debuginfo-2.10-150600.7.11.1 * wpa_supplicant-debugsource-2.10-150600.7.11.1 ## References: * https://www.suse.com/security/cve/CVE-2025-24912.html * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 5 20:45:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 05 Oct 2026 20:45:04 -0000 Subject: SUSE-SU-2026:4491-1: important: Security update for valkey Message-ID: <179123310466.29870.17344686576273675280@c47cdf24d69a> # Security update for valkey Announcement ID: SUSE-SU-2026:4491-1 Release Date: 2026-10-05T13:22:16Z Rating: important References: * bsc#1281417 Cross-References: * CVE-2026-92925 CVSS scores: * CVE-2026-92925 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92925 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92925 ( NVD ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-92925 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability can now be installed. ## Description: This update for valkey fixes the following issue: * CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of- bounds read (bsc#1281417). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4491 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4491 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4491 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * openSUSE Leap 15.6 (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * valkey-debugsource-8.0.10-150600.13.31.1 * valkey-devel-8.0.10-150600.13.31.1 * valkey-debuginfo-8.0.10-150600.13.31.1 * valkey-8.0.10-150600.13.31.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * valkey-compat-redis-8.0.10-150600.13.31.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92925.html * https://bugzilla.suse.com/show_bug.cgi?id=1281417 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:31:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:31:08 -0000 Subject: SUSE-SU-2026:24010-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179127546808.346.15745791373334417601@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24010-1 Release Date: 2026-10-05T04:52:11Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1826 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:32:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:32:13 -0000 Subject: SUSE-SU-2026:24009-1: important: Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179127553329.346.12323792943313080601@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24009-1 Release Date: 2026-10-02T10:28:57Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1820 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_5-rt-17-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-debuginfo-17-160000.3.4 * kernel-livepatch-SLE16-RT_Update_0-debugsource-17-160000.3.4 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:33:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:33:18 -0000 Subject: SUSE-SU-2026:24008-1: important: Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179127559862.346.14669419028167494868@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24008-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1819 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_1-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-16-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:34:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:34:24 -0000 Subject: SUSE-SU-2026:24007-1: important: Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179127566424.346.16858681006516387060@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24007-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1818 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_2-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:35:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:35:29 -0000 Subject: SUSE-SU-2026:24006-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179127572947.346.8985351700282527065@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24006-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1817 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_8-rt-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16-RT_Update_3-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:36:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:36:34 -0000 Subject: SUSE-SU-2026:24005-1: important: Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179127579481.346.12161999997780654306@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24005-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1816 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_9-rt-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16-RT_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:37:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:37:39 -0000 Subject: SUSE-SU-2026:24004-1: important: Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179127585931.346.8955707293682851793@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24004-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1815 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:38:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:38:44 -0000 Subject: SUSE-SU-2026:24003-1: important: Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179127592453.346.15637389495833109638@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24003-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1814 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_27-rt-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-11-160000.1.1 * kernel-livepatch-SLE16-RT_Update_6-debugsource-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:39:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:39:49 -0000 Subject: SUSE-SU-2026:24002-1: important: Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179127598970.346.10519517954894613953@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24002-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1813 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_28-rt-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16-RT_Update_7-debugsource-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:40:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:40:56 -0000 Subject: SUSE-SU-2026:24001-1: important: Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179127605632.346.7551206280024386323@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24001-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1812 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_29-rt-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_8-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-rt-debuginfo-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:42:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:42:02 -0000 Subject: SUSE-SU-2026:24000-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179127612243.346.5864676587677153586@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24000-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1811 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_30-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-rt-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:43:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:43:07 -0000 Subject: SUSE-SU-2026:23999-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179127618707.346.2410336710509146359@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23999-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1810 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_31-rt-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_10-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:44:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:44:11 -0000 Subject: SUSE-SU-2026:23998-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179127625133.346.16987057343075787092@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23998-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1809 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_32-rt-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16-RT_Update_11-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:45:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:45:19 -0000 Subject: SUSE-SU-2026:23997-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179127631924.346.10155432928286979923@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23997-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1808 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_12-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:46:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:46:25 -0000 Subject: SUSE-SU-2026:23996-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179127638518.346.16447646451988103547@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23996-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1807 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_13-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:47:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:47:28 -0000 Subject: SUSE-SU-2026:23995-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179127644849.346.17682564824565822773@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23995-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1806 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_14-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:48:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:48:29 -0000 Subject: SUSE-SU-2026:23994-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179127650929.346.4143229846090345513@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23994-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1805 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_36-rt-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16-RT_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:49:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:49:22 -0000 Subject: SUSE-SU-2026:23993-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179127656276.346.3694324247242679174@d98e15e472c6> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:23993-1 Release Date: 2026-10-02T10:28:56Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1804 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_37-rt-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-rt-debuginfo-3-160000.1.1 * kernel-livepatch-SLE16-RT_Update_16-debugsource-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 08:50:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 08:50:19 -0000 Subject: SUSE-SU-2026:4516-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Message-ID: <179127661921.346.14891275110521521516@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4516-1 Release Date: 2026-10-05T18:33:42Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4516 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4516 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_121-default-19-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-19-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_30-debugsource-19-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_121-default-19-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-19-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_30-debugsource-19-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:31:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:31:01 -0000 Subject: SUSE-SU-2026:4540-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Message-ID: <179128986182.5544.9132863949903432947@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4540-1 Release Date: 2026-10-06T08:05:00Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4540 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4540 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-3-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-3-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-3-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:31:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:31:59 -0000 Subject: SUSE-SU-2026:4538-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7) Message-ID: <179128991912.5544.1582314272587233140@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4538-1 Release Date: 2026-10-06T08:04:35Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.81 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4538 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_81-default-2-150700.2.1 * kernel-livepatch-6_4_0-150700_53_81-default-debuginfo-2-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_21-debugsource-2-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:33:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:33:01 -0000 Subject: SUSE-SU-2026:4537-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179128998196.5544.15565890928042728334@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4537-1 Release Date: 2026-10-06T08:04:23Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4537 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_18-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-5-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:33:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:33:51 -0000 Subject: SUSE-SU-2026:4536-1: important: Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5) Message-ID: <179129003161.5544.18089639021758097903@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 75 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4536-1 Release Date: 2026-10-06T08:04:12Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.283 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4536 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_283-default-14-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:34:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:34:41 -0000 Subject: SUSE-SU-2026:4531-1: important: Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) Message-ID: <179129008137.5544.17006682942343107062@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4531-1 Release Date: 2026-10-06T06:33:54Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4531 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4531 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-3-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-3-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-3-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-3-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-3-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:35:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:35:54 -0000 Subject: SUSE-SU-2026:4530-1: important: Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) Message-ID: <179129015481.5544.1574149120619681186@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4530-1 Release Date: 2026-10-06T08:05:19Z Rating: important References: * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4530 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4541 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4530 SUSE-2026-4541 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_57-debugsource-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-4-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_57-debugsource-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-6-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-6-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-4-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:37:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:37:19 -0000 Subject: SUSE-SU-2026:4518-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) Message-ID: <179129023921.5544.15003992644902987995@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4518-1 Release Date: 2026-10-06T08:04:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4518 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4518 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4539 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-10-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-10-150600.2.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_16-default-18-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_4-debugsource-18-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-debuginfo-18-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:38:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:38:33 -0000 Subject: SUSE-SU-2026:4519-1: important: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Message-ID: <179129031393.5544.10643353483091959586@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4519-1 Release Date: 2026-10-06T02:33:49Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272391 * bsc#1272679 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 13 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4519 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4519 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4517 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4517 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_50-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-10-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_50-debugsource-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-10-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_33-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-14-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_33-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:39:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:39:36 -0000 Subject: SUSE-SU-2026:4535-1: important: Security update for docker-stable Message-ID: <179129037603.5544.11658457177550927039@b6db9e7d26e0> # Security update for docker-stable Announcement ID: SUSE-SU-2026:4535-1 Release Date: 2026-10-06T08:00:15Z Rating: important References: * bsc#1260279 * bsc#1265782 * bsc#1266625 * bsc#1267827 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-41567 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for docker-stable fixes the following issues: * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4535 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4535 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4535 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4535 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4535 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4535 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4535 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4535 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4535 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4535 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4535 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * Containers Module 15-SP7 (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-debuginfo-24.0.9_ce-150000.1.48.1 * docker-stable-24.0.9_ce-150000.1.48.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * docker-stable-zsh-completion-24.0.9_ce-150000.1.48.1 * docker-stable-bash-completion-24.0.9_ce-150000.1.48.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1260279 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:40:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:40:43 -0000 Subject: SUSE-SU-2026:4534-1: important: Security update for python312 Message-ID: <179129044319.5544.742113060791971580@b6db9e7d26e0> # Security update for python312 Announcement ID: SUSE-SU-2026:4534-1 Release Date: 2026-10-06T07:58:39Z Rating: important References: * bsc#1259240 * bsc#1259611 * bsc#1259735 * bsc#1260026 * bsc#1261969 * bsc#1262098 * bsc#1264962 * bsc#1265268 * bsc#1267581 * bsc#1267821 * bsc#1267974 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1271192 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 Cross-References: * CVE-2021-4189 * CVE-2025-13462 * CVE-2025-4330 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19672 * CVE-2026-2297 * CVE-2026-3276 * CVE-2026-3644 * CVE-2026-4224 * CVE-2026-4360 * CVE-2026-45186 * CVE-2026-4519 * CVE-2026-4786 * CVE-2026-6100 * CVE-2026-7210 * CVE-2026-72522 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-9669 CVSS scores: * CVE-2021-4189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-4189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2021-4189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2025-13462 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-13462 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-13462 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13462 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2025-4330 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2297 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2297 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-2297 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3644 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-3644 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4519 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:L/SI:H/SA:N * CVE-2026-4519 ( SUSE ): 6.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N * CVE-2026-4519 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4519 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4519 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 26 vulnerabilities can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined (bsc#1259611). * CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). * CVE-2026-1502: HTTP client proxy tunnel headers not validated for CR/LF (bsc#1261969). * CVE-2026-2297: cpython: incorrectly handled hook in FileLoader can lead to validation bypass (bsc#1259240). * CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). * CVE-2026-4519: leading dashes in URLs are accepted by the `webbrowser.open()` API and allow for web browser command line option injection (bsc#1260026). * CVE-2026-6100: Arbitrary code execution or information disclosure via use- after-free in decompression modules (bsc#1262098). * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). * CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server- supplied PASV host address (bsc#1265268). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). * CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). * CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python312: * Update to 3.12.14: * Core and Builtins * gh-139808: Add branch protections for AArch64 (BTI/PAC) in assembly code used by -X perf_jit (Linux perf profiler integration). * Documentation * gh-136155: We are now checking for fatal errors in EPUB builds in CI. * Library * gh-109638: Fix exponential time in csv.Sniffer.sniff() for a sample which contains many quote characters. A doubled quote character is now also detected in a field which contains the delimiter or a line break. * gh-98820: Fix quadratic time in csv.Sniffer.sniff() for a sample which contains quoted fields, in particular for a single column of quoted fields. * gh-149231: In tomllib, the number of parts in TOML keys is now limited. * gh-146083: Update bundled libexpat to version 2.7.5. * gh-141707: Don't change tarfile.TarInfo type from AREGTYPE to DIRTYPE when parsing GNU long name or link headers (bsc#1259611, CVE-2025-13462). * gh-90949: Add SetBillionLaughsAttackProtectionActivationThreshold() and SetBillionLaughsAttackProtectionMaximumAmplification() to xmlparser objects to tune protections against billion laughs attacks. Patch by B?n?dikt Tran. * Security * gh-155558: Update bundled libexpat to version 2.8.3 for the fix to CVE 2026-72522. * gh-153030: Fixed quadratic complexity in incremental parsing of long unterminated constructs (such as tags or comments) in html.parser.HTMLParser, which could be exploited for a denial of service (bsc#1271192, CVE-2026-15308). * gh-152674: The xml.etree.ElementTree.Element methods findall(), iterfind() and find() avoid quadratic behavior when using XPath index predicates ([1], [last()], [last()-N]) on XML documents with many same-tag siblings. * gh-152216: Update bundled libexpat to version 2.8.2. * gh-151987: The tarfile.TarFile.extract() method now applies the given filter when it extracts a link target from the archive as a fallback (bsc#1269959, CVE-2026-4360). * gh-151981: In tarfile, seeking a stream now stops when end of the stream is reached (bsc#1269788, CVE-2026-11972). * gh-151544: Modules/Setup.local is no longer used as a landmark to discover whether Python is running in a source tree, as it could potentially affect actual installs. The pybuilddir.txt file is now the sole indicator of running in a source tree. * gh-151558: Fixed an vulnerability in the tarfile data and tar extraction filters where crafted archives could create a symlink pointing outside the destination directory. This was a bypass of CVE 2025-4330 (bsc#1268977, CVE-2026-11940). * gh-150599: Fix a possible stack buffer overflow in bz2 when a bz2.BZ2Decompressor is reused after a decompression error. The decompressor now becomes unusable after libbz2 reports an error (bsc#1267974, CVE-2026-9669). * gh-150743: http.client now limits the number of chunked-response trailer lines it will read to 100, and the number of interim (1xx) responses it will skip to 100. A malicious or broken server could previously stream trailer lines or 100 Continue responses forever, hanging the client even when a socket timeout was in use. Reported by @YLChen-007 via GHSA-w4q2-g22w-6fr4. * gh-149698: Update bundled libexpat to version 2.8.1 for the fix for CVE 2026-45186. * gh-87451: The ftplib module's undocumented ftpcp function no longer trusts the IPv4 address value returned from the source server in response to the PASV command by default, completing the fix for CVE-2021-4189. As with ftplib.FTP, the former behavior can be re-enabled by setting the trust_server_pasv_ipv4_address attribute on the source ftplib.FTP instance to True. Thanks to Qi Deng at Aurascape AI for the report (bsc#1265268, CVE-2026-8328). * gh-149486: tarfile.data_filter() now validates link targets using the same normalised value that is written to disk, strips trailing separators from the member name when resolving a symlink's directory, and rejects link members that would replace the destination directory itself. This closes several path-traversal bypasses of the data extraction filter (bsc#1267821, CVE-2026-7774). * gh-149079: Fix a potential denial of service in unicodedata.normalize(). The canonical ordering step of Unicode normalization used a quadratic-time insertion sort for reordering combining characters, which could be exploited with crafted input containing many combining characters in non-canonical order. Replaced with a linear-time counting sort for long runs (bsc#1267581, CVE-2026-3276). * gh-149018: Improved protection against XML hash-flooding attacks in xml.parsers.expat and xml.etree.ElementTree when Python is compiled with libExpat 2.8.0 or later (bsc#1264962, CVE-2026-7210). * gh-149017: Update bundled libexpat to version 2.8.0. * gh-148808: Added buffer boundary check when using nbytes parameter with asyncio.AbstractEventLoop.sock_recvfrom_into(). Only relevant for Windows and the asyncio.ProactorEventLoop. * gh-148395: Fix a dangling input pointer in lzma.LZMADecompressor, bz2.BZ2Decompressor, and internal zlib._ZlibDecompressor when memory allocation fails with MemoryError, which could let a subsequent decompress() call read or write through a stale pointer to the already-released caller buffer (bsc#1262098, CVE-2026-6100, seems like it has been incompletely applied gh#python/cpython#151605). * gh-148169: A bypass in webbrowser allowed URLs prefixed with %action to pass the dash-prefix safety check (bsc#1262098, CVE-2026-6100). * gh-146581: Fix vulnerability in shutil.unpack_archive() for ZIP files on Windows which allowed to write files outside of the destination tree if the patch in the archive contains a Windows drive prefix. Now such invalid paths will be skipped. Files containing ".." in the name (like "foo..bar") are no longer skipped. * gh-146333: Fix quadratic backtracking in configparser.RawConfigParser option parsing regexes (OPTCRE and OPTCRE_NV). A crafted configuration line with many whitespace characters could cause excessive CPU usage. * gh-146211: Reject CR/LF characters in tunnel request headers for the HTTPConnection.set_tunnel() method (bsc#1261969, CVE-2026-1502). * gh-145986: xml.parsers.expat: Fixed a crash caused by unbounded C recursion when converting deeply nested XML content models with ElementDeclHandler(). This addresses CVE 2026-4224 (bsc#1259735, CVE-2026-4224). * gh-145599: Reject control characters in http.cookies.Morsel update() and js_output(). This addresses CVE 2026-3644. * gh-145506: Fixes CVE 2026-2297 by ensuring that SourcelessFileLoader uses io.open_code() when opening .pyc files (bsc#1259240, CVE-2026-2297). * gh-144370: Disallow usage of control characters in status in wsgiref.handlers to prevent HTTP header injections. Patch by Benedikt Johannes. * gh-143930: Reject leading dashes in URLs passed to webbrowser.open() (bsc#1260026, CVE-2026-4519). * gh-143927: Normalize all line endings (CR, CRLF, and LF) to LF+TAB when writing multi-line configparser values (bsc#1269066, CVE-2026-0864). * Tests * gh-149776: Fix test_socket on Linux kernel 7.1 and newer: skip UDP Lite tests if it's not supported. Patch by Victor Stinner. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4534 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4534 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4534 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python312-curses-3.12.14-150600.3.68.1 * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-doc-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 * python312-testsuite-debuginfo-3.12.14-150600.3.68.1 * python312-doc-devhelp-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-testsuite-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-curses-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (x86_64) * libpython3_12-1_0-32bit-3.12.14-150600.3.68.1 * python312-base-32bit-debuginfo-3.12.14-150600.3.68.1 * python312-32bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-32bit-debuginfo-3.12.14-150600.3.68.1 * python312-base-32bit-3.12.14-150600.3.68.1 * python312-32bit-3.12.14-150600.3.68.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-base-64bit-3.12.14-150600.3.68.1 * python312-64bit-3.12.14-150600.3.68.1 * python312-64bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-64bit-3.12.14-150600.3.68.1 * python312-base-64bit-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-64bit-debuginfo-3.12.14-150600.3.68.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python312-curses-3.12.14-150600.3.68.1 * python312-base-debuginfo-3.12.14-150600.3.68.1 * libpython3_12-1_0-3.12.14-150600.3.68.1 * libpython3_12-1_0-debuginfo-3.12.14-150600.3.68.1 * python312-core-debugsource-3.12.14-150600.3.68.1 * python312-debugsource-3.12.14-150600.3.68.1 * python312-tk-3.12.14-150600.3.68.1 * python312-dbm-debuginfo-3.12.14-150600.3.68.1 * python312-curses-debuginfo-3.12.14-150600.3.68.1 * python312-devel-3.12.14-150600.3.68.1 * python312-base-3.12.14-150600.3.68.1 * python312-tk-debuginfo-3.12.14-150600.3.68.1 * python312-debuginfo-3.12.14-150600.3.68.1 * python312-tools-3.12.14-150600.3.68.1 * python312-dbm-3.12.14-150600.3.68.1 * python312-3.12.14-150600.3.68.1 * python312-idle-3.12.14-150600.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2021-4189.html * https://www.suse.com/security/cve/CVE-2025-13462.html * https://www.suse.com/security/cve/CVE-2025-4330.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-2297.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3644.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-4519.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1259240 * https://bugzilla.suse.com/show_bug.cgi?id=1259611 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1260026 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:41:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:41:44 -0000 Subject: SUSE-SU-2026:4533-1: important: Security update for docker-stable Message-ID: <179129050482.5544.6180902770186543476@b6db9e7d26e0> # Security update for docker-stable Announcement ID: SUSE-SU-2026:4533-1 Release Date: 2026-10-06T07:58:14Z Rating: important References: * bsc#1260279 * bsc#1265782 * bsc#1266625 * bsc#1267827 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-41567 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for docker-stable fixes the following issues: * CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header (bsc#1260279). * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4533 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4533 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-stable-24.0.9_ce-1.40.1 * docker-stable-debuginfo-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * docker-stable-bash-completion-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * docker-stable-24.0.9_ce-1.40.1 * docker-stable-debuginfo-24.0.9_ce-1.40.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * docker-stable-bash-completion-24.0.9_ce-1.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1260279 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 12:42:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 12:42:24 -0000 Subject: SUSE-SU-2026:4532-1: moderate: Security update for openexr Message-ID: <179129054479.5544.875715929719572708@b6db9e7d26e0> # Security update for openexr Announcement ID: SUSE-SU-2026:4532-1 Release Date: 2026-10-06T07:57:59Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4532 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openexr-devel-2.1.0-6.54.1 * libIlmImf-Imf_2_1-21-debuginfo-2.1.0-6.54.1 * openexr-debuginfo-2.1.0-6.54.1 * libIlmImf-Imf_2_1-21-2.1.0-6.54.1 * openexr-2.1.0-6.54.1 * openexr-debugsource-2.1.0-6.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:30:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:30:46 -0000 Subject: SUSE-SU-2026:4548-1: important: Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) Message-ID: <179130424689.904.8567785298549679630@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 78 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4548-1 Release Date: 2026-10-06T11:03:49Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.296 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4548 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_296-default-10-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:31:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:31:51 -0000 Subject: SUSE-SU-2026:4542-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) Message-ID: <179130431151.904.896142600952293244@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4542-1 Release Date: 2026-10-06T10:33:41Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.22 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4542 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4547 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_19-default-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_5-debugsource-15-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-15-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_6-debugsource-13-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:32:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:32:52 -0000 Subject: SUSE-SU-2026:4546-1: critical: Security update for libtcnative-1-0, tomcat, tomcat10 Message-ID: <179130437239.904.10718817425673873856@8fe190deb1b6> # Security update for libtcnative-1-0, tomcat, tomcat10 Announcement ID: SUSE-SU-2026:4546-1 Release Date: 2026-10-06T10:05:10Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for libtcnative-1-0, tomcat, tomcat10 fixes the following issues: Security issues fixed: libtcnative-1-0: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat,tomcat10: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for tomcat: * Update to Tomcat 9.0.122 * Catalina * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) Changes for tomcat10: * Update to Tomcat 10.1.60 * Catalina * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4546 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4546 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4546 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4546 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4546 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4546 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4546 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4546 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4546 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4546 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4546 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * Web and Scripting Module 15-SP7 (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-1.3.9-150200.6.11.2 * libtcnative-1-0-debugsource-1.3.9-150200.6.11.2 * libtcnative-1-0-debuginfo-1.3.9-150200.6.11.2 * libtcnative-1-0-devel-1.3.9-150200.6.11.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * tomcat10-10.1.60-150200.5.82.2 * tomcat10-webapps-10.1.60-150200.5.82.2 * tomcat-el-3_0-api-9.0.122-150200.123.2 * tomcat10-admin-webapps-10.1.60-150200.5.82.2 * tomcat10-el-5_0-api-10.1.60-150200.5.82.2 * tomcat-webapps-9.0.122-150200.123.2 * tomcat10-servlet-6_0-api-10.1.60-150200.5.82.2 * tomcat-servlet-4_0-api-9.0.122-150200.123.2 * tomcat-jsp-2_3-api-9.0.122-150200.123.2 * tomcat-9.0.122-150200.123.2 * tomcat10-lib-10.1.60-150200.5.82.2 * tomcat10-jsp-3_1-api-10.1.60-150200.5.82.2 * tomcat-lib-9.0.122-150200.123.2 * tomcat-admin-webapps-9.0.122-150200.123.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:33:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:33:31 -0000 Subject: SUSE-SU-2026:4545-1: important: Security update for MozillaFirefox Message-ID: <179130441192.904.1225617877501768857@8fe190deb1b6> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4545-1 Release Date: 2026-10-06T10:03:15Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4545 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4545 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4545 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4545 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4545 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4545 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4545 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4545 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4545 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4545 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4545 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4545 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-153.4.0-150400.157.11.1 * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * openSUSE Leap 15.4 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * Desktop Applications Module 15-SP7 (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-other-153.4.0-150400.157.11.1 * MozillaFirefox-debuginfo-153.4.0-150400.157.11.1 * MozillaFirefox-translations-common-153.4.0-150400.157.11.1 * MozillaFirefox-153.4.0-150400.157.11.1 * MozillaFirefox-debugsource-153.4.0-150400.157.11.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * MozillaFirefox-devel-153.4.0-150400.157.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:34:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:34:49 -0000 Subject: SUSE-SU-2026:4544-1: critical: Security update for libtcnative-1-0, tomcat11 Message-ID: <179130448984.904.9544948643213257711@8fe190deb1b6> # Security update for libtcnative-1-0, tomcat11 Announcement ID: SUSE-SU-2026:4544-1 Release Date: 2026-10-06T10:01:26Z Rating: critical References: * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#622430 Cross-References: * CVE-2026-73581 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 CVSS scores: * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for libtcnative-1-0, tomcat11 fixes the following issues: Security issues fixed: libtcnative-1-0: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). tomcat11: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method Changes for tomcat11: * Update to Tomcat 11.0.26 * Catalina * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. (markt) * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. This includes not swapping out a session unless the session was created when activity tracking was enabled. (markt) * Fix: Ensure namespace attributes are XML escaped in WebDAV responses. * Fix: Resolve null or missing rewrite substitutions as an empty string, to align with the mod_rewrite behavior. (remm) * Add: a best efforts protection in the CrawlerSessionManagerValve against crawlers being associated with an authenticated session. (markt) * Fix: Clarify the meaning of various RewriteValve server variables and explicitly use the canonical context path for the CONTEXT_PATH server variable. (markt) * Fix: storeconfig not saving the path when a context is saved in server.xml. (remm) * Fix: WAR URLConnection should propagate use of caching. (remm) * Fix: Ensure resources are evicted from the static resource cache in the correct order. (markt) * Fix: When Jakarta Authentication is configured for a web application, cache the ServerAuthConfig in the Authenticator valve. This ensures web application specific settings are cached on a per web application basis. * Fix: 70203: Fix RegistrationListener notifications in Jakarta Authentication implementation. (markt) * Fix: Handle CGI scripts that write excessively to stdout after setting an HTTP error status code. (schultz) * Fix: Require the request to the login action during FORM authentication to be made using HTTP POST. (markt) * Fix: 70208: Make URL encoding more robust. Based on pull request #1065 by Chenjp. (markt) * Coyote * Fix: parsing of client certificates that specify more than one OCSP responder for configurations that use OpenSSL-FFM. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Jasper * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Web applications * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Other * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 2.0.16. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Cluster * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4544 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4544 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4544 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4544 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4544 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * openSUSE Leap 15.6 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-docs-webapp-11.0.26-150600.13.36.2 * tomcat11-doc-11.0.26-150600.13.36.2 * tomcat11-embed-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-jsvc-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * Web and Scripting Module 15-SP7 (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-1-0-debuginfo-1.3.9-150600.16.9.2 * libtcnative-1-0-devel-1.3.9-150600.16.9.2 * libtcnative-1-0-1.3.9-150600.16.9.2 * libtcnative-1-0-debugsource-1.3.9-150600.16.9.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * tomcat11-jsp-4_0-api-11.0.26-150600.13.36.2 * tomcat11-11.0.26-150600.13.36.2 * tomcat11-el-6_0-api-11.0.26-150600.13.36.2 * tomcat11-lib-11.0.26-150600.13.36.2 * tomcat11-admin-webapps-11.0.26-150600.13.36.2 * tomcat11-servlet-6_1-api-11.0.26-150600.13.36.2 * tomcat11-webapps-11.0.26-150600.13.36.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=622430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 16:35:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 16:35:48 -0000 Subject: SUSE-SU-2026:4543-1: important: Security update for MozillaFirefox Message-ID: <179130454890.904.15574878357708506099@8fe190deb1b6> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4543-1 Release Date: 2026-10-06T10:00:32Z Rating: important References: * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 62 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.4.0 ESR (MFSA 2026-100, bsc#1282929): * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4543 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4543 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-153.4.0-118.11.1 * MozillaFirefox-translations-common-153.4.0-118.11.1 * MozillaFirefox-debugsource-153.4.0-118.11.1 * MozillaFirefox-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-debuginfo-153.4.0-118.11.1 * MozillaFirefox-translations-common-153.4.0-118.11.1 * MozillaFirefox-debugsource-153.4.0-118.11.1 * MozillaFirefox-153.4.0-118.11.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.4.0-118.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 6 20:30:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 06 Oct 2026 20:30:45 -0000 Subject: SUSE-SU-2026:4550-1: important: Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) Message-ID: <179131864530.1015.6318898623510321143@d98e15e472c6> # Security update for the Linux Kernel (Live Patch 77 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4550-1 Release Date: 2026-10-06T14:33:39Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.293 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4550 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_293-default-13-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 08:30:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 08:30:36 -0000 Subject: SUSE-SU-2026:4551-1: important: Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) Message-ID: <179136183619.1282.9462048349062674427@7c2c7ba11e06> # Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4551-1 Release Date: 2026-10-06T18:33:36Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4551 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_302-default-9-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 12:30:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 12:30:25 -0000 Subject: SUSE-SU-2026:4552-1: important: Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) Message-ID: <179137622518.32019.13937589047801564666@b6db9e7d26e0> # Security update for the Linux Kernel (Live Patch 82 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4552-1 Release Date: 2026-10-07T00:33:56Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.307 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4552 SUSE-SLE-Live- Patching-12-SP5-2026-4553 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_307-default-7-2.1 * kgraft-patch-4_12_14-122_299-default-10-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 12:30:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 12:30:30 -0000 Subject: SUSE-SU-2026:4554-1: important: Security update for google-osconfig-agent Message-ID: <179137623048.32019.14124425951201691357@b6db9e7d26e0> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:4554-1 Release Date: 2026-10-07T08:00:38Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4554 ## Package List: * Public Cloud Module 12 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-1.63.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:30:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:30:43 -0000 Subject: SUSE-SU-2026:24016-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179139064326.1876.15768086784596080428@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24016-1 Release Date: 2026-10-05T04:52:11Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1826 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1826 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:30:49 -0000 Subject: SUSE-SU-2026:24015-1: moderate: Security update for rsyslog Message-ID: <179139064900.1876.10066739665071756707@8fe190deb1b6> # Security update for rsyslog Announcement ID: SUSE-SU-2026:24015-1 Release Date: 2026-10-03T09:17:41Z Rating: moderate References: * bsc#1281628 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for rsyslog fixes the following issue: * imdtls: fix permitted-peer authorization bypass (bsc#1281628). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1825 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1825 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rsyslog-module-relp-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-8.2502.0-160000.6.1 * rsyslog-8.2502.0-160000.6.1 * rsyslog-module-gtls-8.2502.0-160000.6.1 * rsyslog-module-gtls-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-relp-8.2502.0-160000.6.1 * rsyslog-debugsource-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-8.2502.0-160000.6.1 * rsyslog-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-debuginfo-8.2502.0-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rsyslog-module-relp-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-8.2502.0-160000.6.1 * rsyslog-8.2502.0-160000.6.1 * rsyslog-module-gtls-8.2502.0-160000.6.1 * rsyslog-module-gtls-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-relp-8.2502.0-160000.6.1 * rsyslog-debugsource-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-8.2502.0-160000.6.1 * rsyslog-module-mmnormalize-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-ossl-8.2502.0-160000.6.1 * rsyslog-debuginfo-8.2502.0-160000.6.1 * rsyslog-module-gssapi-debuginfo-8.2502.0-160000.6.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281628 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:31:10 -0000 Subject: SUSE-SU-2026:24014-1: important: Security update for rustup Message-ID: <179139067015.1876.5211627194883590477@8fe190deb1b6> # Security update for rustup Announcement ID: SUSE-SU-2026:24014-1 Release Date: 2026-10-02T19:31:21Z Rating: important References: * bsc#1230032 * bsc#1243862 * bsc#1249008 * bsc#1257902 * bsc#1270186 * bsc#1270521 * bsc#1270619 * bsc#1270644 * bsc#1270795 * bsc#1270870 * bsc#1270874 * bsc#1270989 * bsc#1274144 * bsc#1282217 Cross-References: * CVE-2024-12224 * CVE-2025-58160 * CVE-2026-25541 * CVE-2026-25727 * CVE-2026-41676 * CVE-2026-41677 * CVE-2026-41678 * CVE-2026-41681 * CVE-2026-41898 * CVE-2026-42327 * CVE-2026-44662 * CVE-2026-45784 * CVE-2026-93599 * CVE-2026-93600 * CVE-2026-93601 * CVE-2026-93602 CVSS scores: * CVE-2024-12224 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-12224 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-12224 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-41676 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-41676 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-41676 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41676 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41677 ( SUSE ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U * CVE-2026-41677 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-41677 ( NVD ): 1.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41677 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41678 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-41678 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-41678 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41678 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-41681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-41681 ( NVD ): 8.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41681 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41898 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41898 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-41898 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41898 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-42327 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42327 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-42327 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44662 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-44662 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-44662 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45784 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-45784 ( NVD ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45784 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93599 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93599 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93599 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93599 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93600 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-93600 ( SUSE ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93600 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93600 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93601 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93601 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93601 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93601 ( NVD ): 2.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93602 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93602 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93602 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93602 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 16 vulnerabilities can now be installed. ## Description: This update for rustup fixes the following issues: * CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243862). * CVE-2025-58160: tracing-subscriber: Tracing log pollution (bsc#1249008). * CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes (bsc#1274144). * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257902). * CVE-2026-41676: openssl: `Deriver:derive` and `PkeyCtxRef:derive` can overflow short buffers on OpenSSL 1.1.1 (bsc#1270186). * CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate (bsc#1270619). * CVE-2026-41678: openssl: incorrect bounds assertion in aes key wrap in rust- openssl crate (bsc#1270644). * CVE-2026-41681: openssl: MdCtxRef::digest_final() writes past caller buffer with no length check in rust-openssl crate (bsc#1270795). * CVE-2026-41898: openssl: unchecked callback-returned length in PSK and cookie generate trampolines can leak adjacent memory in rust-openssl crate (bsc#1270870). * CVE-2026-42327: openssl: arbitrary code execution via specially crafted certificate in rust-openssl crate (bsc#1270521). * CVE-2026-44662: openssl: heap buffer overflow when encrypting with AES key- wrap-with-padding in rust-openssl crate (bsc#1270874). * CVE-2026-45784: openssl: out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers in rust- openssl crate (bsc#1270989). * CVE-2026-93599: rustls-webpki: panic via empty BIT STRING (bsc#1282217). * CVE-2026-93600: rustls-webpki: name constraints URI validation bypass (bsc#1282217). * CVE-2026-93601: rustls-webpki: name constraint bypass (bsc#1282217). * CVE-2026-93602: rustls-webpki: CRL revocation check bypass (bsc#1282217). * rust-shlex: Multiple issues involving quote API (RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27) (bsc#1230032). Changes for rustup: * Update to version 1.29.1~0: * dist(rustup-init/sh): update commit shasum in help string * style(bin/rustup-init): reformat code * docs(changelog): update for v1.29.1 stable release * warn how to switch away from the deprecated complete profile * fix(cli/help): fix wording in `rustup run --help` * ci(docker/android): stop building OpenSSL * refactor(cli/docs): use tracing for docs opening status messages * refactor(self-update): rename Windows uninstall registry helpers * feat(test): isolate Windows registry state per test * docs(dev-guide): mention how to support new compilation targets * Fix funding link * chore(deps): lock file maintenance * refactor(cli/self-update): move `current_install_opts()` to `InstallOpts::display()` * refactor(cli/self-update): move `process` out of `InstallOpts` * fix(cli/self-update): postpone initialization of `Cfg` in `setup_mode` * refactor(cli/self-update): take `Process` in `check_existence_of_settings_file()` * fix(settings): prevent creating new file with `SettingsFile::read_settings()` * test(cli-inst-interactive): test file creation on cancelled installation * refactor(toolchain/names): inline `validate()` aliases into `FromStr` * refactor(toolchain/names): rename `validate()` to `normalize_name()` * fix minor typos * www: align copy icon * refactor(toolchain/names)!: remove `try_from_str!()` * refactor(toolchain/names)!: remove `from_variant!()` * Add `rustup doc --serve` to serve docs over local HTTP * Move doc() and man() into a new docs module * chore(github): comment out instructions in PR template * docs(dev-guide): reapply abandoned changes from #4970 * Add riscv64 unknown linux musl support * fix(deps): update rust crate enum-map to v3 * refactor(cli/self-update)!: rename `install()` to `InstallOpts::install()` * refactor(cli/self-update)!: rename `maybe_install_rust()` to `InstallOpts::install_rust()` * refactor(cli/self-update)!: rename `InstallOpts::install()` to `InstallOpts::select_toolchain()` * refactor(toolchain/names)!: make more clones during conversions explicit * refactor(cli/self-update): move message templates to `mod msg` * style(cli/self-update): reorganize imports * Add pull request template linking to the dev guide * doc: add AI policy to the dev guide * ci(dist): ensure pushing to `dev-static` on `stable` update * test(toolchain): add a test case for `rustup toolchain install --override` * feat(toolchain): add `--default` flag to `rustup toolchain install` * fix(toolchain): inline use of `set_override` * Add Enzyme to the list of rustup components * fix: repair toolchains without an installed manifest * refactor: expose the installed manifest path * Docs: Remove i686 `set default-host` example * fix(self-update): only remove complete profile lines * chore(deps): bump `platforms` to 4.1.0 * chore(deps): remove pinned `openssl-src` * refactor: replace `cfg_if!{}` with `cfg_select!{}` * fix: Lock state file updates * Fix Rust 1.97 clippy warnings * uninstalls toolchains prior to deleting the rustup home folder * Take semver-compatible dependency updates * Upgrade platforms to 4 * docs: update `CHANGELOG` for v1.29.1 * Lock file maintenance * Remove Windows special case from `can_run` * diskio: drop unnecessary constructor wrapper * diskio: rename _IncrementalFileState to FileState * diskio: inline IncrementalFileState type alias * Minimize API visibility * toolchain: streamline validate() implementations * toolchain: avoid internal cloning * dist: drop unused conversion impl * dist: keep impls with type definitions * Don't hide allocations inside From impls * toolchain: drop impls for &String * Warn on clippy::or_fun_call * Warn on clippy::needless_by_ref_mut * Warn on clippy::redundant_clone * Warn on clippy::manual_let_else * Warn on clippy::use_self * errors: box ToolchainDesc in RustupError variants * errors: box Manifest in RequestedComponentsUnavailable variant * No (more) need to allow clippy::arc_with_non_send_sync * Replace use of FnMut trait objects with custom trait * test(cli/self-upd): use direct arg0 override for `as_rustup_setup()` * chore(deps): update actions/cache action to v6 * ci(windows): add support for aarch64-pc-windows-gnullvm target * ci(windows): refine MSVC/MINGW job step predicates * chore(deps): update actions/checkout action to v7 * fix(deps): update rust crate itertools to 0.15 * fix(progress): use the `prefix` placeholder instead of `msg` for component name * rustup: warn when no toolchain or default is configured * errors: extract default stable hint * feat(toolchain): make the "installed" text of a toolchain install green * Add aarch64-unknown-freebsd * chore: address linter warnings * chore(deps): bump to semver-compatible versions * Add funding links * ci(docker/freebsd): bump `clang` version to `freebsd14` * ci(freebsd): use FreeBSD 14.0 for full CI * chore(deps): update `curl` * feat(cli/rustup-mode): warn about auto-installation in some subcommands * refactor(config): accept `Cfg` in `EnsureInstalled::warn_auto_install()` * test(cli/rustup-mode): test auto-installation on to-be-deprecated subcommand * dist: move display_name() before other methods that it calls * chore(gitignore): add .cargo/config.windows-cross.toml to gitignore * docs(dev-guide): update platform-specific code guidance * docs(dev-guide): mention rust-analyzer support for Windows-specific code on Unix * docs(dev-guide): mention how to lint Windows-specific code on Unix * chore(config): add example config for cross checking and rust-analyzer * chore: add rust-analyzer example config * Display the full names of targets not matching the host target tuple * docs(dev-guide/tips-and-tricks): mention the `RUSTUP_FORCE_ARG0='rustup'` cargo alias * build(cargo): add `cargo` alias for `RUSTUP_FORCE_ARG0='rustup'` * docs: rename the repath helper variable * Remove double buffering when extracting archives * refactor(toolchain/distributable): return `EnsureInstalled<>` from `DistributableToolchain::install()` * docs(dev-guide/coding-standards): adapt style guide from rustls * fix(deps): update opentelemetry * feat(config): warn user if auto-install is enabled * refactor(config): return `EnsureInstalled<>` from more functions * refactor(config): extract `EnsureInstalled<>` wrapper type * test: make tests agnostic to external `RUSTUP_AUTO_INSTALL` and `RUST_RECURSION_COUNT` * test(dist): fail v2 manifest update when manifest disagrees with .sha256 * fix(dist): propagate v2 manifest checksum failure instead of reporting "unchanged" * Align shell setup comments in install message * feat(cli/self-update): refine wording of "already installed Rust" warning * chore(settings): rename default_host_triple to default_host_tuple and alias old name * chore(settings): add test to parse default_host_triple in toml * test(download): also scrub `HTTP_PROXY` in `scrub_env()` * chore: document legacy default host setting * chore: rename internal tuple constants * chore: rename partially "Triple" to "Tuple" to reflect the new terminology * fix(cli/rustup-mode)!: complete `rustup show` if active toolchain is not installed * refactor(cli/rustup-mode): postpone eval of `active_toolchain_targets` in `show()` * refactor(cli/rustup-mode): postpone eval of `active_toolchain` in `show()` * refactor(cli/rustup-mode): reduce rightward drift in `show()` * refactor(cli/rustup-mode): refine usage of `stdout` term and locks in `show()` * feat(config): add `Cfg` field to force-disable auto-installation * Provide --yes alias for -y flag consistently * refactor(tests): rename triple to tuple * refactor: bulk rename triple to ruple * refactor: rename get_default_host_triple to default_host_tuple * test(download): support more feature flag combinations * docs: fix the FileBuffer::clear doc comment wording * docs: fix plural of VM in coding standards * fix(dist): bulk rename triple to tuple for variables and messages * refactor(dist): rename PartialTargetTriple to PartialTargetTuple * refactor(dist): rename triple module to target_tuple * refactor: remove PartialToochainDesc::has_triple() in favor to PartialTargetTriple::is_empty() * refactor(dist): rename TargetTriple to TargetTuple * fix(self-update): rename triple to tuple in self_update * dist: bump `rustup` version to v1.29.1 * ci(linux/x64-musl): install missing libc dependencies * fix(tests): rename HOST_TRIPLE placeholder to HOST_TUPLE * fix(tests): rename this_host_triple() to this_host_tuple() * fix(init): rename triple to tuple to reflect the new terminology * fix(docs): rename triple to tuple to reflect the new terminology * chore(deps): update ubuntu docker tag to v26 * Improve error message for incomplete toolchains * chore(deps): update bwoodsend/setup-winlibs-action action to v1.16 * test(dist/manifest): use the reordered fixture in `manifest_serialized_with_sorted_keys` * docs: fix "initial" spelling in stylesheet variable * ci: powerpc64-unknown-linux-musl is now stable * style(cli/rustup-mode): address clippy warnings * docs(dev-guide): update release process with new backporting flow * docs: fix actions template README typo * Only show post-install instructions for currently installed shells * docs: fix Windows MSVC guide typo * Upgrade to rustls-platform-verifier 0.7 * Make component removal best-effort and preserve single-error behavior * Use `cc-rs` to detect the default linker, instead of assuming `cc` * ci(test): add `workflow_dispatch` trigger on par with `schedule` * ci: fix incorrect `contains()` predicate * fix(dist/manifestation): fix log format when installing exactly 2 components * Allow rustup component add to install multiple components in one update #4787 * fix(docs): correct link to `no-self-update` feature * ci: enable on all PR target branches * ci(backport): rename backport branches to `release/*` * feat(toolchain): run a pre-check before updating all toolchains * feat(install): accept an optional pre-fetched manifest when installing * fix(toolchain): extract manifest fetching out of `show_dist_version()` * fix(manifest): aggregate a manifest and its hash in a `ManifestWithHash` struct * fix: Reduce flickering by using `set_move_cursor` * ci(backport): add support for backporting * fix: install message misalignment. * refactor: extracted `progress_style` method for DownloadStatus * fix(deps): update rust crate sha2 to 0.11 * chore(doc): Added comments for clarify the usage of `Component::name` `Manifest::name` and the `short_name` funcc accordingly. * refactor: Rename `Component`'s `name_in_manifest` to `name` and `short_name` accordingly * self_update: show path to executable in case of updater failure * Revert "fix(ci/freebsd): install ca certs to prevent certificate-related issues" * ci: don't install protoc * Update to mdbook 0.5 * ci(all-features): bump protoc version * fix(dist/manifestation): use full toolchain name in `Update::unavailable_components()` * style(dist/manifestation): merge imports * Fix zsh completion showing all PATH entries for +toolchain arg * fix(cli/proxy-mode): stop enforcing `quiet: true` * chore(deps/freebsd): downgrade `libz-sys` to v1.1.24 * fix(ci/freebsd): install ca certs to prevent certificate-related issues * fix(rustup-init/sh): prevent passing `--default-host` twice * Avoid warning about the existence of a `settings.toml` on a fresh install * use tuple instead of triple for env overrides * Take platforms 3.9.0 * Unpin tracing-subcriber * chore(deps): update `aws-lc-rs` and `aws-lc-sys` * docs(changelog): update release date for v1.29.0 * docs(dev-guide/release-process): mention the CfT blog post * docs(changelog): update for v1.29.0 stable release * fix(cli): Style CLI errors in init mode * test: Add unknown arg init test * chore(deps): update actions/upload-artifact action to v7 * refactor(www): simplify instruction css selector * feat(www): make copy button dark mode-aware * feat(www): move feedback text out of copy button * fix(www): apply filter to rust logo * feat(www): add dark mode * refactor(www): extract css variables * fix(cli/self-update): enforce a newline after `check_updates()` * refactor(cli/self-update): extract `has_progress_bars` in `check_updates()` * fix(cli/self-update): unify `check_*update*()`'s message formats * docs(downloads): fix the default number of `RUSTUP_CONCURRENT_DOWNLOADS` * feat(toolchain): add `--override` to override toolchain as soon as installed * fix(toolchain): improve logs when recovering from an interrupted installation * chore(deps): downgrade `openssl-src` to 300.5.4+3.5.4 * style(download): clean up imports * fix(diskio): fall back to single-threaded unpacking when `ram_budget` < 512MB to avoid OOM on memory-constrained systems * test(downloads): check if an error is thrown if the server does not honor range * fix(downloads): check correct response when resuming from partial (reqwest) * fix(downloads): check correct response when resuming from partial (curl) * fix(deps): update rust crate toml to v1 * fix(dist/manifest): sort keys when serializing `Manifest` * hack(ci/linux): disable BuildKit when building local images * chore(ci): use more distinctive local image names * Upgrade rand to 0.10 * Upgrade snapbox to 1 * Upgrade to anstream 1 * fix(downloads): adjust error message for partial files in network failures * test(downloads): ensure that partial files are not removed when network fails * feat(downloads): do not delete partial download when network fails * fix(downloads): substitute `DEK` alias for `DownloadError` * chore(deps): update aws-actions/configure-aws-credentials action to v6 * cli: introduce semantic exit code constants for rustup check * Add missing Windows SDK instructions * Add winget instructions to MSVC install page * Remove nu-string-interpolation `$` * Replace $nu.home-path with ~ * feat(cli/rustup-mode): add "Exit status" section to `rustup check --help` * Add common commands section in help text * fix(cli/rustup-mode): improve exit code of `rustup check` * refactor(test)!: pass status code directly to `SanitizedOutput` * Add powerpc64-unknown-linux-musl support * fix: add copy_file_symlink_to_source for self-installation * fix: preserve symlinks in copy_dir instead of following them * feat(cli/rustup-mode): add `doc --rustc-docs` to open rustdoc for Rust internals * Remove the mixed singular/plural phrasing as "component(s)" instead, use "components" or "component". In the singular case also add the name of the component for more consistent messaging style with other info! outputs about single components. * fix(cli/rustup-mode): `check` for self updates for `SelfUpdateMode::CheckOnly` * test: Add test for sequential multi-toolchain uninstall * fix: directory removal race condition in toolchain uninstall * test(cli_v2): test error when missing many components on install * fix(dist): adjust printed newlines in `components_missing_msg()` * unified nightly disclaimer wording/styling; preserved distinct messages per scenario * Upgrade to reqwest 0.13 * change test name to match new terminology * rename file to match new terminology * change 'target triple' to 'target tuple' * fix(toolchain): forbid toolchain names starting with + * cli: add `doc --releases` to open release notes * chore(deps): update actions/upload-artifact action to v6 * chore(deps): update actions/cache action to v5 * dist: use more concise API in helper function * dist: inline more logic into helper function * dist: give helper function a more meaningful name * dist: move helper function closer to usage site * docs(dev-guide): mention snapshot updating in release process * fix(toolchain): avoid unwrapping when parsing a toolchain name * fix(toolchain): change regex to reject leading zeros in toolchain name * docs(changelog): update for v1.29.0 beta release * dist: bump `rustup` version to v1.29.0 * docs(changelog): add missing link references * test(static-roots): use a more compact syntax for raw binaries * test(static-roots): return `Result` from `store_static_roots()` * download: statically bundle relevant trust anchors * Added xonsh support * refactor(dist/manifestation): remove redundant redeclarations * docs(dist/download): remove outdated note on concurrent download progress reporting * fix(dist/download): align `total_bytes` fields in progress reporting UI * fix: default to GNU host in Cygwin/MSYS/MinGW environments (#4221) * chore(config): remove redundant imports * fix(dist/manifestation): print "downloading component" only on `InstallEvents` * fix(utils): downgrade panic to warning in `delete_dir_contents_following_links()` * chore(deps): update actions/checkout action to v6 * Prepare for mdbook 0.5 migration * dist: make installation asynchronous * dist: make installations 'static * dist: take ownership of Manifestation * dist: store owned temp::Context in Transaction * dist: store temp::Context in DownloadCfg * dist: align progress bar elements * dist: track progress during unpacking * utils: drop unused reader tracking * process: fix refresh rate for progress bars * process: reduce duplication in ProgressDrawTarget setup * Yield references from Manifest::short_name() * Move Component name helpers to Manifest * dist: simplify ComponentBinary construction * dist: hoist creation of io_executor some more * Move unpack_ram() from dist to diskio * dist: hoist Executor creation up * dist: inline effective RAM limit calculation * dist: hoist environment variable extraction * dist: use logging for missing parent warnings * dist: clarify dependency on unpack RAM budget * diskio: clarify dependency on I/O thread count * dist: transfer ownership of component values * dist: take ownership of existing Components * dist: take ownership of toolchain name in update() * dist: take ownership of manifest in update() * dist: derive trivial initialization for Update * dist: rename Update::build_update() to new() * dist: linearize for-loop in Update::build_update() * dist: inline single-use function * dist: inline trivial helper function * dist: inline single-use tranaction change helpers * dist: store specific config bit in Transaction * chore(config): migrate config .github/renovate.json * dist: attach manifest download functions to DownloadCfg * rustup: unhide top-level install/uninstall commands * dist: move update_from_dist() to DistOptions::install_into() * Be more consistent about aliases for different subcommands * test: add test for `rustup toolchain install --no-update` * feat(rustup-mode): add `no_update` flag to `rustup toolchain install` * cli: prepare DistOptions in advance * dist: inline trivial wrapper function * cli: inline single-use update_all_channels() helper * config: simplify update_all_channels() * dist: deduplicate DistOptions initialization * dist: avoid recomputing dist root URL * dist: simplify tracing instrumentation * install: take ownership in InstallMethod::install() * dist: move DistributableToolchain::install() up * dist: clarify when update_hash is available * cli: avoid dropped temporary * Take semver-compatible dependencies * dist: install while downloading * dist: store more context in ComponentBinary * dist: yield self when download is complete * dist: move URL alteration logic into DownloadCfg method * Apply suggestions from clippy 1.91 * refactor(check): Consolidate use_colors checks * fix(check): Use Cargo's colors * refactor(check): Make calls more consistent * dist: drop another layer of abstraction * dist: store package directory once * dist: inline short single-use function * dist: discard unnecessary abstraction layer * chore(deps): update actions/upload-artifact action to v5 * fix(cli/rustup-mode): add missing self-update in `rustup toolchain install` * refactor(cli/self-update): move `self_update()` to `SelfUpdateMode::update()` * refactor(cli/rustup-mode): pass self-update predicates into `self_update()` * refactor(cli/self-update): import `utils::ExitCode` * rustup: tweak update check output style * fix(list): Match show command's styling * test(list): Add UI test * fix(toolchain): Have 'list' match 'show's styling * refactor(toolchain): Order logic by display order * refactor(toolchain): Use string interpolation * test(toolchain): Show list's behavior * fix(update): Match 'cargo update's colors * refactor(update): Centralize style knowledge * test: Cover different show_channel_update cases * fix(check): Subject check to RUSTUP_TERM_COLOR * test(check): Show current style * fix: Use HEADER styling in 'rustup show' * chore: Update clap-cargo * test: Demonstrate show's behavior * test(process): Allow forcing color on * test(process): Ensure non-locked writes are stripped of ANSI escape codes * cli: update `uninstall_removes_source_from_rcs` to mirror `uninstall_doesnt_modify_rcs_with_no_modify_path` * cli: add tests for `rustup self uninstall --no-modify-path` * cli: add `rustup self uninstall --no-modify-path` * cli: add help text for `rustup self uninstall -y` * fix(cli/help): change indentation of discussions to 2 spaces * fix(cli/help): adjust help text for `rustup install` * feat(cli/help): add toolchain install tips to `rustup update`'s discussion * feat(cli/help): discuss `rustup toolchain install` * style: Remove wildcard imports * progress: modify progress bar's states to be column-aligned * installations: handle installation of components through progress bars * feat(cli): Add a sub-heading style for 'completion' Help Discussion * feat(cli): Have Help Discussions match rest of CLI Help * feat(cli): Add color to clap help/errors * refactor(cli): Switch help text to functions * cli: propagate ActiveSource from the top * cli: upgrade error events to ERROR level * cli: inline Cfg::active_rustc_version() * cli: extract display_version() from rustup main() * cli: inline Cfg::resolve_local_toolchain() * cli: inline Cfg::resolve_toolchain() * config: extract setting of toolchain override in rustup help mode * cli: avoid Cfg construction indirection * config: privatize some Cfg fields * config: drop trivial Cfg setters * Expand `RUSTUP_TOOLCHAIN_SOURCE`'s documentation * refactor(installation): extract installation of a component into a separate function * bin: clean up imports * cli: rename CLIError to CliError * config: rename OverrideDB to OverrideDb * dist: clean up unnecessary qualification * test: Replace trycmd with snapbox * chore: Update snapbox * Update the default Windows SDK version * refactor(log): Single source RUSTUP_TERM_COLOR * style: Encourage using existing imports * process: avoid fine-grained locking for logs * process: discard unnecessary layer of synchronization * process: inline TerminalInnerLocked * process: replace unsafe code with safe equivalent * process: extract color_choice() method * process: extract is_a_tty value * process: inline StreamSelector::is_a_tty() * process: inline TestWriterLock * Implement `RUSTUP_TOOLCHAIN_SOURCE` with new `Display` impl * Move `Display` impl to `to_reason()` * Rename `ActiveReason` to `ActiveSource` * dist: simplify DownloadStatus setup * dist: decentralize download status * dist: postpone creation of ComponentBinary values * dist: extract DownloadStatus type * dist: call DownloadTracker methods directly * dist: drop unnecessary Notifier layer * dist: replace PackageContext with DownloadCfg * refactor: Directly apply styling * refactor: Don't bother grabbing lock for tests * refactor: Replace termcolor with anstream * refactor: Move style building out of ColorableTerminal * refactor: Migrate to anstyle for color definitions * fix(www): removes www subdomain from all rust-lang.org urls * dist: move Notification into dist::download * notifications: remove unused Display impl * dist: move Notifier into DownloadCfg * cli: build Cfg earlier in setup mode * dist: reuse existing DownloadCfg in update_v1() * dist: move dist_root out of DownloadCfg * dist: drop unused Clone derives * dist: drop Copy derive from DownloadCfg * dist: move Notifier and DownloadTracker into dist::download * dist: inline DownloadCfg test setup * download: move File items down * download: extract DownloadCfg initialization from Cfg * config: discard pointless method argument * cli: rename DownloadTracker::new_with_display_progress() to new() * notifications: log directly from DownloadTracker * notifications: log directly on bad download checksums * notifications: log directly when reusing downloaded files * notifications: log directly on buffer size changes * Update platforms to 3.7.0 * notifications: log directly on duplicate toolchain files * notifications: log directly on metadata upgrades that remove toolchains * notifications: log directly when reading metadata version * notifications: log directly when metadata upgrade is not needed * notifications: log directly when upgrading metadata version * notifications: log directly when uninstalling toolchains * notifications: log directly when toolchain is up to date * notifications: log directly when toolchain has been installed * notifications: log directly when installing toolchains * notifications: log the toolchain directory directly * notifications: log directly when using existing toolchains * notifications: log directly when looking for toolchains * notifications: log directly when setting auto-self-update mode * notifications: log directly when setting profile * notifications: log directly when setting overrides * notifications: use human-friendly log format for temp file deletions * notifications: use human-friendly log format for directory deletions * notifications: use human-friendly log format for retrying renames * notifications: use human-friendly log format for path canonicalization * cli: drop unnecessary generics * process: import instead of qualifying ColorableTerminal * process: hide internal structure * process: don't re-export external items * process: rename terminalsource to terminal_source * process: rename filesource to file_source * process: re-order items in terminalsource module * feat(cli/self-update): add support for PowerShell on Unix systems * refactor: Remove unused traits * refactor: Directly use ColorableTerminal * refactor: Simplify working with ColorableTerminal * fix(process): Ensure stdout/stderr lock is held across calls * refactor(process): Centralize Write bookkeeping * docs(changelog): describe default profile change during auto-install * Fix typo in clitools.rs comment * ci(docs): fix local doc branch name * Move the default branch from `master` to `main` * Upgrade opentelemetry dependencies * ci: use macOS Intel runners * notifications: log directly when setting the default toolchain * notifications: log directly when setting auto install mode * notifications: log directly when resuming partial downloads * notifications: log directly when downloading files * notifications: log directly when removing stray hash files * notifications: log directly when skipping components * notifications: log directly on missing components * notifications: log directly when downloading legacy manifests * notifications: log directly for downloaded manifests * notifications: log directly for manifest downloads * notifications: log directly when removing components * notifications: log directly when installing components * notifications: log directly after failing to determine memory limit * notifications: log directly when hash file not found * notifications: log directly when failing to update hash file * notifications: log directly when component is already installed * notifications: log directly for valid checksums * notifications: log directly when using download backends * chore: avoid trailing whitespace in error message * refactor: Switch logging to anstyle * refactor: Remove unused ColorableTerminal::carriage_return * notifications: privatize Notification type * notifications: log directly on creating temp files * notifications: log directly on temp root creation * notifications: log directly on file deletions * notifications: log directly on directory deletions * notifications: log directly about non-fatal errors * notifications: log directly about rolling back changes * notifications: log directly for retrying renames * notifications: log directly when removing directories * notifications: log directly when copying directories * notifications: log directly when linking directories * notifications: log directly when path canonicalization fails * notifications: log directly when creating directories * tests: use DistContext for dist::components tests * tests: move DistContext into library * tests: deduplicate distribution installation tests * notifications: tweak style * Inline utils Notification variants into top-level Notification * Inline dist Notification variants into top-level Notification * Inline dist::temp::Notification variants into top-level Notification * dist: remove temp::Notification variant from dist::Notification * dist: extract URL alteration from download() method * dist: detach download_component() from Manifestation * dist: introduce ComponentBinary type * dist: avoid passing through arguments * dist: avoid unnecessary type annotations * dist: avoid cloning components Vec * refactor: remove redundant references * dist: simpify casting to trait object * dist: deduplicate decompression setup code * cli: move more self update logic into self_update module * refactor(dist/manifestation): remove redundant `.to_string()` * Remove unneeded paranthesees * Fix link in the bug reporting template * ci(all-features/windows): update `OPENSSL_LIB_DIR` for OpenSSL v3 compatibility * docs(dev-guide): improve suggestion for overriding arg0 * docs(dev-guide): mention the arg0 override trick on welcome page * docs(README): link CI status badge to GitHub Actions panel * feat(dist/manifestation): adjust default concurrent downloads when installing toolchains * feat(cli/rustup-mode): check updates for all channels unless `RUSTUP_CONCURRENT_DOWNLOADS` is set to 1 * refactor: rename `num_channels` to `concurrent_downloads` * fix: fix hang by preventing `stream.buffered(0)` in concurrent downloads * test(dist/manifestation): extract `TestContext::*with_env()` * refactor(download): use `NonZero` instead of `NonZeroU64` * refactor(process): remove redundant `.context()` in `Process::concurrent_downloads()` * chore(deps/renovate): group version bumps for `windows-rs` crates * Upgrade windows crates * fix(cli/rustup_mode): use ASCII-compatible spinner * chore(deps): update aws-actions/configure-aws-credentials action to v5 * feat(install): warn if default linker (cc) is missing; add respective test case * Remove hardcoded dependency to the master branch * feat(downloads): delay the reappearance of the progress bar when retrying a download * fix(downloads): correct faulty behavior when a download fails * fix(downloads): correct faulty output when retrying a download * feat(self_update): add tcsh shell support to cli #3413 * Replace non_empty_env_var() with Process::var_opt() * fix(downloads): report real elapsed time of a component downloads instead of cumulative * Treat empty environment variables as unset * fix(downloads): honor the RUSTUP_CONCURRENT_DOWNLOADS by always having "n" concurrent downloads * chore(deps): disable default features for zstd * feat(downloads): introduce `RUSTUP_CONCURRENT_DOWNLOADS` to control concurrency * ci(check): make installation of `taplo-cli` faster * fix(notifications): delete unnecessary Download(Pop/Push)Unit notifications * fix(downloads): extract closure for downloading a component into a separate function * feat(downloads): concurrently download components * fix(downloads): add a comment to justify the unwrap on `.get()` of `OnceLock` * chore(deps): update actions/checkout action to v5 * fix(download_timeout): introduce RUSTUP_DOWNLOAD_TIMEOUT for overriding download timeout * fix(downloads): substitute the LazyLock for a OnceLock * feat(rustup_mode): revise help message * feat: improve error message for `rustup which` * test: detach snapshots from component installation order * feat(download_tracker): refactor in favor of `indicatif` * feat(process): create a `ProgressDrawTarget` (for `indicatif`) inside the `Process` * fix(rustup-init/sh): avoid `hw.optional.*: 1` stdout in macOS arch check * hack(cli/common): suppress host emulation warnings in rustup's own CI * fix(test/clitools): pass `RUSTUP_CI` to in-process tests * ci(macos): run x64 workflows with Rosetta 2 * docs(user-guide/environment-variables): clarify the unit of `RUSTUP_UNPACK_RAM` * docs(user-guide/environment-variables): unify description style * docs(user-guide/environment-variables): update description of `RUSTUP_IO_THREADS` * Limit Tokio worker threads to I/O thread count * Use manual Tokio runtime setup * Attach io_thread_count() to Process * Always consider RUSTUP_IO_THREADS as input for thread count * utils: express io_thread_count() in a simpler way * opt(err): show renaming file error source * Set a maximum thread limit for remove_dir_all * fix(toolchain/distributable): refine handling of known targets with no prebuilt artifacts * fix(ci/fetch-rust-docker): update comments * fix(ci/docker): update `CC` name for `powerpc64le-unknown-linux-gnu` * Extract self_update() from update_all_channels() * Show channel updates even if self update is not permitted * Remove Cargo feature indirection * Move Cfg::get_self_update_mode() to SelfUpdateMode::from_cfg() * Replace trivial enum with bool * feat(updates): introduce `RUSTUP_TERM_WIDTH` to override terminal width * feat(updates): introduce `RUSTUP_TERM_PROGRESS_WHEN` to toggle the progress bars * Limit the default number of I/O threads * Bump `toml` to 0.9 * feat(updates): check for updates concurrently * feat(terminal): implement the `TermLike` trait for `ColorableTerminal` * chore: use match ergonomics in favor of explicit `ref`s * refactor(download/curl): use early returns in `download()` * chore(cli/rustup_mode): merge `std` imports * chore(cli/rustup-mode): import `std::io` * chore: fix new `clippy` warnings * fix(ci/run): specify target triple for `bindgen-cli` installation * feat(www): improve "copy" button style compatibility with Chromium * ci(run): install `codegen-cli` with `cargo-binstall` * docs: replace Discord links * Block broken snap curl * Upgrade to windows-sys 0.60 * Emphasize that `llvm-tools` dist component is not subject to compiler stability guarantees * docs(README): update CI status badge * Fix rustup-init.sh cputype check for sparcv9 * add Solaris support * test(clitools)!: remove all deprecated `.expect_*()` APIs * test(clitools)!: privatize `Config::run()` * test: migrate remaining uses of `.run()` to `.expect()` APIs * test(clitools): extract `Assert::redact()` * test: simplify `.display().to_string()` in `.extend_redactions()` * test(cli_misc): bring back missing assertions * Update help.rs: bash completions instructions (#1) * docs(user-guide): fix typo * docs(dev-guide): update the section on `clippy` lints * docs(dev-guide): mention test helpers and `Assert` * docs(test/clitools): add docs for `Assert` * Upgrade to rustls-platform-verifier 0.6 * test(cli-v2): migrate to `.expect()` APIs * test(cli-misc): migrate to `.expect()` APIs * fix(toolchain): fix proxy fallback notification format on Windows * test(cli-v1): migrate to `.expect()` APIs * test(download): serialize tests with proxy-sensitive URLs * test(cli-rustup): migrate to `.expect()` APIs * test(clitool): add `Assert::remove_redactions()` * test(clitools): allow `OsStr`-like args in `Config::expect*()` * Fix CI image names for downloading ARM and PowerPC artifacts * Update platforms to 3.6 * test(cli-exact): migrate to `.expect()` APIs * Avoid swallowing errors in show() * Simplify target processing logic * Inline returned bindings * Increase Windows main thread stack size to 2mb * test(cli-inst-interactive): migrate to `.expect()` APIs * Unset RUSTUP_AUTO_INSTALL for tests * test(cli-paths): migrate to `.expect()` APIs * test(cli-exact): use the new `[CURRENT_VERSION]` redaction * test(cli-self-upd): migrate to `.expect()` APIs * Tweak list_items() docstring * Leverage bool::then_some() to simplify some code * Avoid intermediate allocation in listing * test(custom-toolchains): `target list` now can display the installed targets * feat(custom-toolchains): `target` and `component list` working on custom toolchains * Skip manifest loading if there are no components/targets to check * fix(deps): update rust crate opener to 0.8.0 * rustup check: set exit status based on available updates * rustup check: adopt no-self-update logic * feat(self_update): add proxy sanity checks * style(test): qualify uses of `snapbox::str![]` * refactor(test): migrate some tests to `.expect()` APIs * chore(test): deprecated old APIs overlapping with the new ones * refactor(test): add new `.expect()`-based testing APIs * test(custom-toolchains): using `show` on a custom toolchain without a `components` file * test(custom-toolchains): add test to showcase that the issue was solved * feat(custom-toolchains): `rustup show` now reporting installed targets * tests: print diffs on test failures * Log versions during self updates * Fix cargo lints on Windows * toolchain: hoist binary name conditionals out of fallback functions * refactor(test): replace `TempDir::into_path()` with `TempDir::keep()` * refactor(test/clitools): use globally-defined `tempdir_in_with_prefix()` * feat(toolchain): notify the user when proxy fallback is activated * feat(toolchain): consider external `rust-analyzer` when calling a proxy * refactor(toolchain): move predicates into `Toolchain::maybe_do_cargo_fallback()` * refactor(toolchain): privatize `Toolchain::maybe_do_cargo_fallback()` * deps: update aws-lc-rs to 1.13.1 * docs(changelog): mirror changes from the release announcement, take 2 * Deprecate native-tls as well * Enable HTTP/2 support for reqwest download backend * Emit tracing events from log facade calls * download: show Debug representation for errors * Avoid repeated globals in tracing events * Log original download errors immediately * feat(cli/rustup-mode): add aliases to `rustup component remove` * Switch flate2 to use the zlib-rs backend * Hardlink proxies if symlinks aren't reachable * Add powerpc64le-unknown-linux-musl support * Add toolchain_name to not installed bail msg * Warn about using curl * Drop workspace indirection * Fold download crate back into rustup * download: merge integration test files * Test CARGO environment replacement * Update CARGO env var if it is a rustup proxy * Tweak toolchain subcommand help text * Move toolchain and default commands first * show toolchain paths in rustup show -v output * refactor(cli/self-update): save allocations in `Nu::rcfiles()` * fix(cli/self-update)!: stop appending to `env.nu` due to deprecation * fix(cli/self-update): consider Windows paths in Nushell suggestions * refactor(cli/self-update): use `path add` in `env.nu` template * fix(cli/self-update): use interpolated string in `env.nu` template * Upgrade dependencies * docs(user-guide/environment-variables): document `RUSTUP_VERSION` * feat(rustup-init/sh): allow setting `RUSTUP_VERSION` during installation * feat(cli/self-update): allow setting `RUSTUP_VERSION` for arbitrary downgrades * feat(test/clitools): add `Config::expect_ok_ex_env()` * fix(errors)!: improve error messages for `RustupError::ToolchainNotInstalled` * Add set auto-install disable * Use `cursor: pointer` for copy button on website * fix(dist): refine suggestions about missing targets * Append Windows bin directory to PATH by default * Remove validation for custom toolchains when reading rust-toolchain.toml * document RUSTUP_AUTO_INSTALL * Fix build script `cargo` instructions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1824 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1824 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * rustup-debuginfo-1.29.1~0-160000.1.1 * rustup-debugsource-1.29.1~0-160000.1.1 * rustup-1.29.1~0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * rustup-debuginfo-1.29.1~0-160000.1.1 * rustup-debugsource-1.29.1~0-160000.1.1 * rustup-1.29.1~0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12224.html * https://www.suse.com/security/cve/CVE-2025-58160.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://www.suse.com/security/cve/CVE-2026-25727.html * https://www.suse.com/security/cve/CVE-2026-41676.html * https://www.suse.com/security/cve/CVE-2026-41677.html * https://www.suse.com/security/cve/CVE-2026-41678.html * https://www.suse.com/security/cve/CVE-2026-41681.html * https://www.suse.com/security/cve/CVE-2026-41898.html * https://www.suse.com/security/cve/CVE-2026-42327.html * https://www.suse.com/security/cve/CVE-2026-44662.html * https://www.suse.com/security/cve/CVE-2026-45784.html * https://www.suse.com/security/cve/CVE-2026-93599.html * https://www.suse.com/security/cve/CVE-2026-93600.html * https://www.suse.com/security/cve/CVE-2026-93601.html * https://www.suse.com/security/cve/CVE-2026-93602.html * https://bugzilla.suse.com/show_bug.cgi?id=1230032 * https://bugzilla.suse.com/show_bug.cgi?id=1243862 * https://bugzilla.suse.com/show_bug.cgi?id=1249008 * https://bugzilla.suse.com/show_bug.cgi?id=1257902 * https://bugzilla.suse.com/show_bug.cgi?id=1270186 * https://bugzilla.suse.com/show_bug.cgi?id=1270521 * https://bugzilla.suse.com/show_bug.cgi?id=1270619 * https://bugzilla.suse.com/show_bug.cgi?id=1270644 * https://bugzilla.suse.com/show_bug.cgi?id=1270795 * https://bugzilla.suse.com/show_bug.cgi?id=1270870 * https://bugzilla.suse.com/show_bug.cgi?id=1270874 * https://bugzilla.suse.com/show_bug.cgi?id=1270989 * https://bugzilla.suse.com/show_bug.cgi?id=1274144 * https://bugzilla.suse.com/show_bug.cgi?id=1282217 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:31:49 -0000 Subject: SUSE-SU-2026:24013-1: important: Security update for wireshark Message-ID: <179139070999.1876.16162293990339177579@8fe190deb1b6> # Security update for wireshark Announcement ID: SUSE-SU-2026:24013-1 Release Date: 2026-10-02T17:37:57Z Rating: important References: * bsc#1275279 * bsc#1275280 * bsc#1275281 * bsc#1275828 * bsc#1275829 * bsc#1275831 * bsc#1275832 * bsc#1275833 * bsc#1275834 * bsc#1275835 * bsc#1275836 * bsc#1275838 * bsc#1275839 * bsc#1275840 * bsc#1275841 * bsc#1275842 * bsc#1275843 * bsc#1275844 * bsc#1275845 * bsc#1275846 * bsc#1275847 * bsc#1275848 * bsc#1275849 * bsc#1275850 * bsc#1275851 * bsc#1275852 * bsc#1275853 * bsc#1275854 Cross-References: * CVE-2026-19694 * CVE-2026-19695 * CVE-2026-19696 * CVE-2026-76879 * CVE-2026-76880 * CVE-2026-76881 * CVE-2026-76882 * CVE-2026-76883 * CVE-2026-76884 * CVE-2026-76885 * CVE-2026-76886 * CVE-2026-76887 * CVE-2026-76888 * CVE-2026-76889 * CVE-2026-76890 * CVE-2026-76891 * CVE-2026-76917 * CVE-2026-76918 * CVE-2026-76919 * CVE-2026-76920 * CVE-2026-76921 * CVE-2026-76922 * CVE-2026-76923 * CVE-2026-76924 * CVE-2026-76926 * CVE-2026-76927 * CVE-2026-76928 * CVE-2026-76929 CVSS scores: * CVE-2026-19694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19694 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19694 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19695 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-19696 ( NVD ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2026-76879 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76879 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76880 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76880 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76881 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76881 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76881 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76882 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76883 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76884 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76884 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76884 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76885 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76885 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76885 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76886 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76886 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76886 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76887 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76887 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76887 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76888 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76888 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76888 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76889 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76889 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76889 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76890 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76890 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76890 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76891 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76917 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76917 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76918 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76918 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76919 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76919 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76919 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76920 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76920 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76920 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76921 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76921 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76922 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76922 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76923 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76923 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76924 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76924 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76926 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76926 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-76926 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76927 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76928 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76928 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76929 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76929 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-76929 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 28 vulnerabilities can now be installed. ## Description: This update for wireshark fixes the following issues: Update to Wireshark 4.4.18: * CVE-2026-19694: TTX Logger file parser crash (bsc#1275279). * CVE-2026-19695: Gammu DCT3 trace file parser crash (bsc#1275280). * CVE-2026-19696: Ixia IxVeriWave and Vector Informatik BLF file parser crashes on Windows (bsc#1275281). * CVE-2026-76879: C12.22 protocol dissector crash (bsc#1275828). * CVE-2026-76880: RRC protocol dissector crash (bsc#1275829). * CVE-2026-76881: CMS protocol dissector crash (bsc#1275831). * CVE-2026-76882: Bluetooth Attribute Protocol dissector crash (bsc#1275832). * CVE-2026-76883: Catapult DCT2000 file parser crash (bsc#1275833). * CVE-2026-76884: ERF file parser crash (bsc#1275834). * CVE-2026-76885: Tektronix K12xx file parser crash (bsc#1275835). * CVE-2026-76886: C12.22 protocol dissector crash (bsc#1275836). * CVE-2026-76887: Dissection engine reassembly crash (bsc#1275838). * CVE-2026-76888: RDP protocol dissector crash (bsc#1275839). * CVE-2026-76889: UMTS FP protocol dissector crash (bsc#1275840). * CVE-2026-76890: Sharkd utility crash (bsc#1275841). * CVE-2026-76891: Sharkd utility crash (bsc#1275844). * CVE-2026-76917: Bluetooth AVRCP Profile (bsc#1275842). * CVE-2026-76918: SSH protocol dissector crash (bsc#1275843). * CVE-2026-76919: ESS protocol dissector crash (bsc#1275845). * CVE-2026-76920: 3gpp phone log file parser crash (bsc#1275846). * CVE-2026-76921: CMS protocol dissector crash (bsc#1275847). * CVE-2026-76922: Bluetooth BR/EDR FHS protocol dissector crash (bsc#1275848). * CVE-2026-76923: Bluetooth HFP Profile protocol dissector crash (bsc#1275849). * CVE-2026-76924: Kerberos protocol dissector crash (bsc#1275850). * CVE-2026-76926: BUSMASTER file parser abnormal exit (bsc#1275851). * CVE-2026-76927: H.245 protocol dissector crash (bsc#1275852). * CVE-2026-76928: X.509IF protocol dissector crash (bsc#1275853). * CVE-2026-76929: Pcapng file parser crash (bsc#1275854). Many more features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-4.4.18.html ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1822 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1822 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wireshark-devel-4.4.18-160000.1.1 * wireshark-ui-qt-4.4.18-160000.1.1 * libwsutil16-4.4.18-160000.1.1 * wireshark-debuginfo-4.4.18-160000.1.1 * libwireshark18-4.4.18-160000.1.1 * wireshark-4.4.18-160000.1.1 * wireshark-debugsource-4.4.18-160000.1.1 * libwiretap15-4.4.18-160000.1.1 * libwsutil16-debuginfo-4.4.18-160000.1.1 * libwiretap15-debuginfo-4.4.18-160000.1.1 * wireshark-ui-qt-debuginfo-4.4.18-160000.1.1 * libwireshark18-debuginfo-4.4.18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wireshark-devel-4.4.18-160000.1.1 * wireshark-ui-qt-4.4.18-160000.1.1 * libwsutil16-4.4.18-160000.1.1 * wireshark-debuginfo-4.4.18-160000.1.1 * libwireshark18-4.4.18-160000.1.1 * wireshark-4.4.18-160000.1.1 * wireshark-debugsource-4.4.18-160000.1.1 * libwiretap15-4.4.18-160000.1.1 * libwsutil16-debuginfo-4.4.18-160000.1.1 * libwiretap15-debuginfo-4.4.18-160000.1.1 * wireshark-ui-qt-debuginfo-4.4.18-160000.1.1 * libwireshark18-debuginfo-4.4.18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19694.html * https://www.suse.com/security/cve/CVE-2026-19695.html * https://www.suse.com/security/cve/CVE-2026-19696.html * https://www.suse.com/security/cve/CVE-2026-76879.html * https://www.suse.com/security/cve/CVE-2026-76880.html * https://www.suse.com/security/cve/CVE-2026-76881.html * https://www.suse.com/security/cve/CVE-2026-76882.html * https://www.suse.com/security/cve/CVE-2026-76883.html * https://www.suse.com/security/cve/CVE-2026-76884.html * https://www.suse.com/security/cve/CVE-2026-76885.html * https://www.suse.com/security/cve/CVE-2026-76886.html * https://www.suse.com/security/cve/CVE-2026-76887.html * https://www.suse.com/security/cve/CVE-2026-76888.html * https://www.suse.com/security/cve/CVE-2026-76889.html * https://www.suse.com/security/cve/CVE-2026-76890.html * https://www.suse.com/security/cve/CVE-2026-76891.html * https://www.suse.com/security/cve/CVE-2026-76917.html * https://www.suse.com/security/cve/CVE-2026-76918.html * https://www.suse.com/security/cve/CVE-2026-76919.html * https://www.suse.com/security/cve/CVE-2026-76920.html * https://www.suse.com/security/cve/CVE-2026-76921.html * https://www.suse.com/security/cve/CVE-2026-76922.html * https://www.suse.com/security/cve/CVE-2026-76923.html * https://www.suse.com/security/cve/CVE-2026-76924.html * https://www.suse.com/security/cve/CVE-2026-76926.html * https://www.suse.com/security/cve/CVE-2026-76927.html * https://www.suse.com/security/cve/CVE-2026-76928.html * https://www.suse.com/security/cve/CVE-2026-76929.html * https://bugzilla.suse.com/show_bug.cgi?id=1275279 * https://bugzilla.suse.com/show_bug.cgi?id=1275280 * https://bugzilla.suse.com/show_bug.cgi?id=1275281 * https://bugzilla.suse.com/show_bug.cgi?id=1275828 * https://bugzilla.suse.com/show_bug.cgi?id=1275829 * https://bugzilla.suse.com/show_bug.cgi?id=1275831 * https://bugzilla.suse.com/show_bug.cgi?id=1275832 * https://bugzilla.suse.com/show_bug.cgi?id=1275833 * https://bugzilla.suse.com/show_bug.cgi?id=1275834 * https://bugzilla.suse.com/show_bug.cgi?id=1275835 * https://bugzilla.suse.com/show_bug.cgi?id=1275836 * https://bugzilla.suse.com/show_bug.cgi?id=1275838 * https://bugzilla.suse.com/show_bug.cgi?id=1275839 * https://bugzilla.suse.com/show_bug.cgi?id=1275840 * https://bugzilla.suse.com/show_bug.cgi?id=1275841 * https://bugzilla.suse.com/show_bug.cgi?id=1275842 * https://bugzilla.suse.com/show_bug.cgi?id=1275843 * https://bugzilla.suse.com/show_bug.cgi?id=1275844 * https://bugzilla.suse.com/show_bug.cgi?id=1275845 * https://bugzilla.suse.com/show_bug.cgi?id=1275846 * https://bugzilla.suse.com/show_bug.cgi?id=1275847 * https://bugzilla.suse.com/show_bug.cgi?id=1275848 * https://bugzilla.suse.com/show_bug.cgi?id=1275849 * https://bugzilla.suse.com/show_bug.cgi?id=1275850 * https://bugzilla.suse.com/show_bug.cgi?id=1275851 * https://bugzilla.suse.com/show_bug.cgi?id=1275852 * https://bugzilla.suse.com/show_bug.cgi?id=1275853 * https://bugzilla.suse.com/show_bug.cgi?id=1275854 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:31:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:31:55 -0000 Subject: SUSE-SU-2026:24012-1: moderate: Security update for openexr Message-ID: <179139071580.1876.7740346919284630997@8fe190deb1b6> # Security update for openexr Announcement ID: SUSE-SU-2026:24012-1 Release Date: 2026-10-02T15:28:07Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1821 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1821 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libOpenEXRUtil-3_2-31-debuginfo-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-3.2.2-160000.11.1 * openexr-debugsource-3.2.2-160000.11.1 * libIex-3_2-31-debuginfo-3.2.2-160000.11.1 * openexr-3.2.2-160000.11.1 * libIlmThread-3_2-31-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-3.2.2-160000.11.1 * openexr-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * openexr-doc-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libOpenEXRUtil-3_2-31-debuginfo-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-3.2.2-160000.11.1 * libOpenEXR-3_2-31-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-3.2.2-160000.11.1 * openexr-debugsource-3.2.2-160000.11.1 * libIex-3_2-31-debuginfo-3.2.2-160000.11.1 * openexr-3.2.2-160000.11.1 * libIlmThread-3_2-31-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-3.2.2-160000.11.1 * openexr-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-debuginfo-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (noarch) * openexr-doc-3.2.2-160000.11.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libOpenEXRCore-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXRCore-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libOpenEXRUtil-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libIlmThread-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 * libOpenEXR-3_2-31-x86-64-v3-3.2.2-160000.11.1 * libIex-3_2-31-x86-64-v3-debuginfo-3.2.2-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:32:16 -0000 Subject: SUSE-SU-2026:4559-1: important: Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) Message-ID: <179139073654.1876.5558701802415616064@8fe190deb1b6> # Security update for the Linux Kernel (Live Patch 83 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4559-1 Release Date: 2026-10-07T10:05:44Z Rating: important References: * bsc#1267370 * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-46116 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.310 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4559 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_310-default-7-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:32:29 -0000 Subject: SUSE-SU-2026:4558-1: important: Security update for libsoup Message-ID: <179139074994.1876.18426813298893582110@8fe190deb1b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4558-1 Release Date: 2026-10-07T08:51:34Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271447 * bsc#1271449 * bsc#1272195 * bsc#1273156 Cross-References: * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4558 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4558 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4558 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4558 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (x86_64) * libsoup-3_0-0-32bit-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-32bit-3.4.4-150600.3.56.1 * libsoup-3_0-0-32bit-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-64bit-3.4.4-150600.3.56.1 * libsoup-3_0-0-64bit-3.4.4-150600.3.56.1 * openSUSE Leap 15.6 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * Basesystem Module 15-SP7 (noarch) * libsoup-lang-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-3.4.4-150600.3.56.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.56.1 * libsoup-devel-3.4.4-150600.3.56.1 * libsoup-debugsource-3.4.4-150600.3.56.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.56.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup-lang-3.4.4-150600.3.56.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 16:32:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 16:32:41 -0000 Subject: SUSE-SU-2026:4557-1: important: Security update for libsoup Message-ID: <179139076164.1876.7431660214094291031@8fe190deb1b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4557-1 Release Date: 2026-10-07T08:51:00Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271447 * bsc#1271449 * bsc#1272195 * bsc#1273156 Cross-References: * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4557 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4557 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4557 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4557 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4557 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4557 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4557 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4557 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4557 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (x86_64) * libsoup-3_0-0-32bit-3.0.4-150400.3.52.1 * libsoup-devel-32bit-3.0.4-150400.3.52.1 * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-3.0.4-150400.3.52.1 * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.52.1 * libsoup-devel-64bit-3.0.4-150400.3.52.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.52.1 * libsoup-3_0-0-3.0.4-150400.3.52.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.52.1 * libsoup-devel-3.0.4-150400.3.52.1 * libsoup-debugsource-3.0.4-150400.3.52.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.52.1 ## References: * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:30:16 -0000 Subject: SUSE-SU-2026:4561-1: important: Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Message-ID: <179140501683.30.16126547151347324325@f036aff0f2c6> # Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4561-1 Release Date: 2026-10-07T13:34:20Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4561 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_323-default-3-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:30:23 -0000 Subject: SUSE-SU-2026:4568-1: important: Security update for rpcbind Message-ID: <179140502377.30.5963433236938229371@f036aff0f2c6> # Security update for rpcbind Announcement ID: SUSE-SU-2026:4568-1 Release Date: 2026-10-07T15:27:04Z Rating: important References: * bsc#1272340 * bsc#1282326 Cross-References: * CVE-2026-16461 * CVE-2026-94640 CVSS scores: * CVE-2026-16461 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-16461 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for rpcbind fixes the following issues: * CVE-2026-16461: stack buffer overflow in rpcinfo rpcbdump() short-mode version-list formatting (bsc#1272340). * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4568 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4568 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4568 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4568 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4568 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4568 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4568 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4568 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4568 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4568 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4568 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4568 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4568 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4568 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4568 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4568 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rpcbind-debuginfo-0.2.3-150000.5.17.1 * rpcbind-debugsource-0.2.3-150000.5.17.1 * rpcbind-0.2.3-150000.5.17.1 ## References: * https://www.suse.com/security/cve/CVE-2026-16461.html * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1272340 * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:30:29 -0000 Subject: SUSE-SU-2026:4567-1: important: Security update for fetchmail Message-ID: <179140502923.30.18018656147283373157@f036aff0f2c6> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4567-1 Release Date: 2026-10-07T15:23:33Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4567 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4567 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * fetchmail-6.3.26-13.24.1 * fetchmailconf-6.3.26-13.24.1 * fetchmail-debuginfo-6.3.26-13.24.1 * fetchmail-debugsource-6.3.26-13.24.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * fetchmail-6.3.26-13.24.1 * fetchmailconf-6.3.26-13.24.1 * fetchmail-debuginfo-6.3.26-13.24.1 * fetchmail-debugsource-6.3.26-13.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:30:35 -0000 Subject: SUSE-SU-2026:4566-1: important: Security update for libXtst Message-ID: <179140503534.30.16239257599895257178@f036aff0f2c6> # Security update for libXtst Announcement ID: SUSE-SU-2026:4566-1 Release Date: 2026-10-07T15:22:54Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4566 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4566 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4566 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4566 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4566 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4566 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4566 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4566 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4566 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4566 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4566 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4566 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4566 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4566 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4566 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4566 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * Basesystem Module 15-SP7 (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libXtst6-1.2.3-150000.3.3.1 * libXtst-devel-1.2.3-150000.3.3.1 * libXtst6-debuginfo-1.2.3-150000.3.3.1 * libXtst-debugsource-1.2.3-150000.3.3.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libXtst6-32bit-debuginfo-1.2.3-150000.3.3.1 * libXtst6-32bit-1.2.3-150000.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:30:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:30:41 -0000 Subject: SUSE-SU-2026:4565-1: important: Security update for libXtst Message-ID: <179140504187.30.13504210959472426157@f036aff0f2c6> # Security update for libXtst Announcement ID: SUSE-SU-2026:4565-1 Release Date: 2026-10-07T15:20:07Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4565 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4565 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libXtst-devel-1.2.2-8.3.1 * libXtst6-debuginfo-1.2.2-8.3.1 * libXtst-debugsource-1.2.2-8.3.1 * libXtst6-1.2.2-8.3.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libXtst6-32bit-1.2.2-8.3.1 * libXtst6-debuginfo-32bit-1.2.2-8.3.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libXtst-debugsource-1.2.2-8.3.1 * libXtst6-1.2.2-8.3.1 * libXtst-devel-1.2.2-8.3.1 * libXtst6-debuginfo-1.2.2-8.3.1 * libXtst6-32bit-1.2.2-8.3.1 * libXtst6-debuginfo-32bit-1.2.2-8.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 7 20:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 07 Oct 2026 20:31:07 -0000 Subject: SUSE-SU-2026:4560-1: important: Security update for openssl-3-livepatches Message-ID: <179140506727.30.13252439129281655043@f036aff0f2c6> # Security update for openssl-3-livepatches Announcement ID: SUSE-SU-2026:4560-1 Release Date: 2026-10-07T12:42:31Z Rating: important References: * bsc#1280587 * bsc#1282798 Cross-References: * CVE-2026-84782 CVSS scores: * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-3-livepatches fixes the following issue: * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4560 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le x86_64) * openssl-3-livepatches-0.7-150700.16.15.1 * openssl-3-livepatches-debuginfo-0.7-150700.16.15.1 * openssl-3-livepatches-debugsource-0.7-150700.16.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1282798 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 08:30:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 08:30:19 -0000 Subject: SUSE-SU-2026:4570-1: important: Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) Message-ID: <179144821952.533.2551636377720197414@6dbbbe6e8c3a> # Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4570-1 Release Date: 2026-10-07T17:04:15Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4570 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_317-default-5-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:31:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 12:31:18 -0000 Subject: SUSE-SU-2026:4576-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179146267869.23937.14868952539643080553@f42c2f07aca2> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4576-1 Release Date: 2026-10-08T08:09:52Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79 (jsc#ECO-3319): * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * Added new Profile for RHEL10: BSI * Move RHEL Control files to product files * Updated RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 zypper in -t patch SUSE-MultiLinuxManagerTools-Ubuntu-22.04-2026-4576 ## Package List: * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 (amd64) * venv-salt-minion-3006.0-220402.3.28.1 * mgrctl-5.2.17-220402.3.21.2 * SUSE Multi-Linux Manager Client Tools for Ubuntu 22.04 2204 (all) * mgrctl-fish-completion-5.2.17-220402.3.21.2 * mgrctl-zsh-completion-5.2.17-220402.3.21.2 * spacecmd-5.2.10-220402.3.21.2 * scap-security-guide-ubuntu-0.1.80-220402.2.15.2 * mgrctl-bash-completion-5.2.17-220402.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:32:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 12:32:26 -0000 Subject: SUSE-SU-2026:4575-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179146274659.23937.9974333612185470133@f42c2f07aca2> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4575-1 Release Date: 2026-10-08T08:08:46Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 zypper in -t patch SUSE-MultiLinuxManagerTools-Ubuntu-24.04-2026-4575 ## Package List: * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 (amd64) * venv-salt-minion-3006.0-240402.3.28.1 * mgrctl-5.2.17-240402.3.21.2 * SUSE Multi-Linux Manager Client Tools for Ubuntu 24.04 2404 (all) * spacecmd-5.2.10-240402.3.26.3 * mgrctl-fish-completion-5.2.17-240402.3.21.2 * mgrctl-zsh-completion-5.2.17-240402.3.21.2 * mgrctl-bash-completion-5.2.17-240402.3.21.2 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 12:34:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 12:34:29 -0000 Subject: SUSE-SU-2026:4571-1: important: Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server Message-ID: <179146286978.23937.8273840288965424534@f42c2f07aca2> # Maintenance update for Multi-Linux Manager 5.2: Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:4571-1 Release Date: 2026-10-08T08:02:36Z Rating: important References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE * SUSE Multi-Linux Manager Server 5.2 Extension for SLE An update that solves four vulnerabilities, contains one feature and has 60 security fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Proxy ### Description: This update fixes the following issues: Release notese highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security issues Fixed: CVE-2026-39821 * Bugs mentioned bsc#1208800, bsc#1230568, bsc#1230949, bsc#1258382, bsc#1266481 bsc#1268755, bsc#1270033, bsc#1273131, bsc#1273144, bsc#1273846 bsc#1274613, bsc#1274775 Container images and uyuni-tools changes: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgrpxy upgrade podman` which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Retail Branch Server ### Description: This update fixes the following issues: Release notese highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security issues Fixed: CVE-2026-39821 * Bugs mentioned bsc#1208800, bsc#1230568, bsc#1230949, bsc#1258382, bsc#1266481 bsc#1268755, bsc#1270033, bsc#1273131, bsc#1273144, bsc#1273846 bsc#1274613, bsc#1274775 Container images and uyuni-tools changes: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgrpxy upgrade podman` which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server ### Description: This update fixes the following issues: Release Notes Highlights: * Added a note about the SUSE Registry IP address change. * Update to SUSE Multi-Linux Manager 5.2.1 * Security fixes * Ubuntu 26.04 LTS Support * Confidential Computing Attestation for IBM Z Series * New uyuni-tftpd Container * Monitoring: Prometheus upgraded to 3.13.2 * Monitoring: Grafana upgraded to 12.4.10 * CVEs Fixed: CVE-2023-45289, CVE-2024-22195, CVE-2025-12141, CVE-2025-13836 CVE-2025-61686, CVE-2026-15308, CVE-2026-21723, CVE-2026-40181 CVE-2026-11940, CVE-2026-11972, CVE-2026-13346, CVE-2026-14199 CVE-2026-17033, CVE-2026-17183, CVE-2026-19197, CVE-2026-19475 CVE-2026-27459, CVE-2026-33814, CVE-2026-39821, CVE-2026-39882 CVE-2026-40475, CVE-2026-41066, CVE-2026-41178, CVE-2026-41606 CVE-2026-42211, CVE-2026-42342, CVE-2026-44431, CVE-2026-44990 CVE-2026-49825, CVE-2026-49853, CVE-2026-49854, CVE-2026-49855 CVE-2026-56852, CVE-2026-63007, CVE-2026-63009, CVE-2026-71400 CVE-2026-42127, CVE-2026-45409, CVE-2026-53606, CVE-2026-73501 CVE-2025-4673, CVE-2026-0864, CVE-2026-1229, CVE-2026-1502 CVE-2026-1703, CVE-2026-2303, CVE-2026-3219, CVE-2026-3276 Container images and uyuni-tools changes: proxy-tftpd-image: * Updated to version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run `mgradm upgrade podman` which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Proxy-SLE-5.2-2026-4571 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Retail-Branch-Server- SLE-5.2-2026-4571 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE zypper in -t patch SUSE-Multi-Linux-Manager-Server-SLE-5.2-2026-4571 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-150750.3.3.8 * mgrpxy-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (noarch) * mgrpxy-zsh-completion-5.2.17-150750.3.3.8 * mgrpxy-bash-completion-5.2.17-150750.3.3.8 * mgrpxy-lang-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-150750.3.3.8 * mgrpxy-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (noarch) * mgrpxy-zsh-completion-5.2.17-150750.3.3.8 * mgrpxy-bash-completion-5.2.17-150750.3.3.8 * mgrpxy-lang-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (aarch64 ppc64le s390x x86_64) * mgradm-5.2.17-150750.3.3.8 * mgrctl-5.2.17-150750.3.3.8 * mgrctl-debuginfo-5.2.17-150750.3.3.8 * mgradm-debuginfo-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (noarch) * mgrctl-zsh-completion-5.2.17-150750.3.3.8 * mgrctl-lang-5.2.17-150750.3.3.8 * mgrctl-bash-completion-5.2.17-150750.3.3.8 * mgradm-zsh-completion-5.2.17-150750.3.3.8 * mgradm-lang-5.2.17-150750.3.3.8 * mgradm-bash-completion-5.2.17-150750.3.3.8 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (s390x) * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * SUSE Multi-Linux Manager Server 5.2 Extension for SLE (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:30:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:30:38 -0000 Subject: SUSE-SU-2026:24054-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147703810.421.11061190372159371465@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24054-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-665 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-36-rt-17-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:31:07 -0000 Subject: SUSE-SU-2026:24053-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147706775.421.13875468792360072395@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24053-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-664 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-37-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-13-1.1 * kernel-livepatch-6_4_0-37-rt-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:31:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:31:36 -0000 Subject: SUSE-SU-2026:24052-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147709617.421.5599280712442726645@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24052-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-663 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-13-1.1 * kernel-livepatch-6_4_0-38-rt-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:32:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:32:04 -0000 Subject: SUSE-SU-2026:24051-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147712485.421.3331084032809136023@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24051-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-662 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-39-rt-12-1.1 * kernel-livepatch-6_4_0-39-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:32:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:32:34 -0000 Subject: SUSE-SU-2026:24050-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147715434.421.13310437929249494554@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24050-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-661 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-40-rt-11-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:33:03 -0000 Subject: SUSE-SU-2026:24049-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147718387.421.3411199035297798431@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24049-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-660 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-rt-10-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:33:31 -0000 Subject: SUSE-SU-2026:24048-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147721110.421.3014254912549016327@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24048-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-659 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-42-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:33:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:33:58 -0000 Subject: SUSE-SU-2026:24047-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147723896.421.3317446365510611435@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24047-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-658 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-rt-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:34:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:34:27 -0000 Subject: SUSE-SU-2026:24046-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147726795.421.9086688829911928388@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24046-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-657 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-7-1.2 * kernel-livepatch-6_4_0-45-rt-7-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-7-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:34:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:34:56 -0000 Subject: SUSE-SU-2026:24045-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147729644.421.12345861643483267929@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24045-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-656 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-46-rt-7-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:35:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:35:24 -0000 Subject: SUSE-SU-2026:24044-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147732416.421.4776936789041764151@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24044-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-655 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-47-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:35:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:35:52 -0000 Subject: SUSE-SU-2026:24043-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147735274.421.7838660280186143903@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24043-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-654 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-48-rt-5-1.1 * kernel-livepatch-6_4_0-48-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:36:17 -0000 Subject: SUSE-SU-2026:24042-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147737774.421.17380921626401726139@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24042-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-653 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-49-rt-4-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:36:42 -0000 Subject: SUSE-SU-2026:24041-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147740254.421.3609921993021326277@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24041-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-652 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:36:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:36:57 -0000 Subject: SUSE-SU-2026:24040-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147741763.421.17788812159019545887@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24040-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-651 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-3-1.1 * kernel-livepatch-6_4_0-51-rt-3-1.1 * kernel-livepatch-6_4_0-51-rt-debuginfo-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:37:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:37:03 -0000 Subject: SUSE-SU-2026:24039-1: important: Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147742324.421.5087640225180048645@d580628b9e86> # Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24039-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-650 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-52-rt-debuginfo-2-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-rt-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:37:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:37:33 -0000 Subject: SUSE-SU-2026:24038-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147745323.421.16573906862764054865@d580628b9e86> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24038-1 Release Date: 2026-10-06T08:22:10Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-678 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-40-default-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0_Update_17-debugsource-11-1.1 * kernel-livepatch-6_4_0-40-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:38:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:38:02 -0000 Subject: SUSE-SU-2026:24037-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147748287.421.15511311976285263768@d580628b9e86> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24037-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-683 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_11-debugsource-17-1.1 * kernel-livepatch-6_4_0-34-default-debuginfo-17-1.1 * kernel-livepatch-6_4_0-34-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:38:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:38:32 -0000 Subject: SUSE-SU-2026:24036-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147751282.421.10609401532029240606@d580628b9e86> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24036-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-682 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-17-1.1 * kernel-livepatch-6_4_0-35-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:39:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:39:03 -0000 Subject: SUSE-SU-2026:24035-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147754306.421.12649922572357937579@d580628b9e86> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24035-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-681 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-15-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-15-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-15-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:39:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:39:31 -0000 Subject: SUSE-SU-2026:24034-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147757114.421.3576422298704886609@d580628b9e86> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24034-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-680 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-13-1.2 * kernel-livepatch-6_4_0-38-default-13-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-13-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:40:00 -0000 Subject: SUSE-SU-2026:24033-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147760023.421.14715259714917076200@d580628b9e86> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24033-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-679 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_16-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-12-1.1 * kernel-livepatch-6_4_0-39-default-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:40:29 -0000 Subject: SUSE-SU-2026:24032-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147762961.421.15673014898160117732@d580628b9e86> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24032-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-677 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-41-default-10-1.1 * kernel-livepatch-MICRO-6-0_Update_18-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:40:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:40:58 -0000 Subject: SUSE-SU-2026:24031-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147765826.421.9765287727239963291@d580628b9e86> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24031-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-676 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-42-default-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0_Update_19-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-default-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:41:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:41:27 -0000 Subject: SUSE-SU-2026:24030-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147768707.421.16517151322125434960@d580628b9e86> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24030-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-675 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_20-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-default-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:41:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:41:56 -0000 Subject: SUSE-SU-2026:24029-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147771614.421.18376507799819193214@d580628b9e86> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24029-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-674 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-7-1.1 * kernel-livepatch-6_4_0-44-default-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:42:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:42:24 -0000 Subject: SUSE-SU-2026:24028-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147774429.421.1557356307917631462@d580628b9e86> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24028-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-673 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-7-1.1 * kernel-livepatch-6_4_0-45-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:42:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:42:53 -0000 Subject: SUSE-SU-2026:24027-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147777313.421.1113842164692259899@d580628b9e86> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24027-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-672 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_23-debugsource-7-1.1 * kernel-livepatch-6_4_0-46-default-7-1.1 * kernel-livepatch-6_4_0-46-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:43:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:43:20 -0000 Subject: SUSE-SU-2026:24026-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147780079.421.12282120051134333760@d580628b9e86> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24026-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-671 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-debuginfo-6-1.1 * kernel-livepatch-6_4_0-47-default-6-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:43:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:43:48 -0000 Subject: SUSE-SU-2026:24025-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147782862.421.12941147982828918547@d580628b9e86> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24025-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-670 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-48-default-5-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:44:14 -0000 Subject: SUSE-SU-2026:24024-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147785419.421.9626525410109208198@d580628b9e86> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24024-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-669 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-4-1.1 * kernel-livepatch-6_4_0-49-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:44:41 -0000 Subject: SUSE-SU-2026:24023-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147788171.421.4798341368715700064@d580628b9e86> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24023-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-668 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-4-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-4-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:44:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:44:57 -0000 Subject: SUSE-SU-2026:24022-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147789727.421.5825992455042636930@d580628b9e86> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24022-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-667 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-3-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-3-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:45:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:45:08 -0000 Subject: SUSE-SU-2026:24021-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179147790805.421.6525475977335918770@d580628b9e86> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24021-1 Release Date: 2026-10-06T07:55:52Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-666 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-default-debuginfo-2-1.1 * kernel-livepatch-6_4_0-52-default-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:45:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:45:29 -0000 Subject: SUSE-SU-2026:24019-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179147792967.421.2588173836122563829@d580628b9e86> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24019-1 Release Date: 2026-10-05T12:52:47Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-649 ## Package List: * SUSE Linux Micro 6.1 (aarch64 x86_64) * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:46:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:46:58 -0000 Subject: SUSE-SU-2026:24018-1: moderate: Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Message-ID: <179147801807.421.14997705380304907191@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:24018-1 Release Date: 2026-10-08T07:45:40Z Rating: moderate References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Proxy 5.2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 * SUSE Multi-Linux Manager Server 5.2 An update that solves four vulnerabilities, contains one feature and has 60 fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 SUSE-Multi- Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 * SUSE Multi-Linux Manager Retail Branch Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 * SUSE Multi-Linux Manager Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 SUSE-Multi- Linux-Manager-5.2-SUSE_SLFO_Products_Multi-Linux- Manager_5.2_Packages__patchinfo.20260915031526576964.188000203993655 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrctl-debuginfo-5.2.17-160000.1.1 * mgradm-5.2.17-160000.1.1 * mgradm-debuginfo-5.2.17-160000.1.1 * mgrctl-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (noarch) * mgrctl-zsh-completion-5.2.17-160000.1.1 * mgrctl-bash-completion-5.2.17-160000.1.1 * mgradm-bash-completion-5.2.17-160000.1.1 * mgradm-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 * SUSE Multi-Linux Manager Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:47:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:47:11 -0000 Subject: SUSE-SU-2026:4586-1: important: Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) Message-ID: <179147803188.421.12037760721889025285@d580628b9e86> # Security update for the Linux Kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4586-1 Release Date: 2026-10-08T11:04:54Z Rating: important References: * bsc#1272391 * bsc#1273012 * bsc#1273833 * bsc#1275162 * bsc#1275228 * bsc#1276493 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-68121 * CVE-2026-68202 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4586 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_320-default-4-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:47:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:47:17 -0000 Subject: SUSE-SU-2026:4587-1: important: Security update for wpa_supplicant Message-ID: <179147803760.421.9674613288329925638@d580628b9e86> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4587-1 Release Date: 2026-10-08T12:13:03Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). * Fixed incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4587 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4587 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4587 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4587 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4587 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4587 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4587 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4587 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x) * wpa_supplicant-debuginfo-2.9-150000.4.45.1 * wpa_supplicant-2.9-150000.4.45.1 * wpa_supplicant-debugsource-2.9-150000.4.45.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:48:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:48:59 -0000 Subject: SUSE-SU-2026:4585-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147813997.421.12318458241949277903@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4585-1 Release Date: 2026-10-08T08:24:35Z Rating: important References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262187 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263330 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1265525 * bsc#1265763 * bsc#1266481 * bsc#1266608 * bsc#1266669 * bsc#1267261 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268868 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269841 * bsc#1269856 * bsc#1269959 * bsc#1269966 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1270711 * bsc#1271192 * bsc#1271330 * bsc#1271428 * bsc#1271557 * bsc#1271613 * bsc#1272008 * bsc#1272102 * bsc#1272328 * bsc#1272427 * bsc#1273094 * bsc#1273144 * bsc#1274217 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2024-22195 * CVE-2025-13836 * CVE-2025-4673 * CVE-2025-61686 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1229 * CVE-2026-13346 * CVE-2026-14199 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-33814 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-39882 * CVE-2026-40181 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42127 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-44990 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-53606 * CVE-2026-56852 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-73501 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8595 * CVE-2026-8609 * CVE-2026-8643 * CVE-2026-9029 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-61686 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8595 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9029 ( SUSE ): 4.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-9029 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-9029 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-9029 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 * SUSE Linux Enterprise Desktop 15 SP1 * SUSE Linux Enterprise Desktop 15 SP2 * SUSE Linux Enterprise Desktop 15 SP3 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP1 * SUSE Linux Enterprise Real Time 15 SP2 * SUSE Linux Enterprise Real Time 15 SP3 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Multi-Linux Manager Client Tools for SLE 15 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 An update that solves 58 vulnerabilities, contains two features and has 21 security fixes can now be installed. ## Description: This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react- router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 grafana was updated to version 12.4.10: * Security issues: * CVE-2026-17183: Fixed exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269841) * CVE-2026-17033: Fixed stored cross-site scripting risks via malicious Alertmanager generator URLs (bsc#1276426) * CVE-2026-73501: Fixed fail-open authentication bypass in kin-openapi default handlers (bsc#1276973) * CVE-2026-19475: Fixed DoS risks in PostgreSQL Datasource by checking timeGroup macros (bsc#1278307) * CVE-2026-14199: Fixed auth bypass or session takeover via Auth Proxy cache key collision (bsc#1278322) * CVE-2026-19197: Fixed access control and authorization checks in dashboard snapshots (bsc#1277025) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm (bsc#1272008) * CVE-2026-41178: Fixed denial-of-service risks in OpenTelemetry baggage parsing (bsc#1276658) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274217) * CVE-2026-8595: Fixed stored XSS via malicious dashboard field names in table panels (bsc#1271557) * CVE-2026-42127: Fixed DoS risks in the public dashboard query endpoint (bsc#1268868) * CVE-2026-9029: Fixed arbitrary code execution and script injection in the geomap panel (bsc#1272328) * CVE-2026-33814: Fixed infinite loop in HTTP/2 transport during framesize check (bsc#1265763) * CVE-2026-8609: Fixed pre-authentication denial-of-service risks in OAuth login routes (bsc#1271330) * CVE-2026-1229: Fixed incorrect value calculation in ecc/p384 Package (bsc#1265525, bsc#1262187) * CVE-2025-12141: Fixed information disclosure of secure settings via contact point modification (bsc#1262187) * CVE-2026-21723: Fixed out-of-memory and denial-of-service risks in templates test endpoint (bsc#1272427) * CVE-2026-41606: Fixed denial-of-service risks from nested messages in Apache Thrift parser (bsc#1263330) * Bug fixes and changes: * Dashboards: Fix adhoc and groupby variable datasource on UI import * Dashboards: Fix version dates and user display names in the legacy version history page * Dashboard Import: Labels in v2 schema * Azure Monitor: fix migration for dimension filters * Dashboards: Get annotations and dashboard endpoint performance improvements * DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Alerting: Add protected fields authorization check to provisioning API * Alerting: Return 403 instead of 500 on contact point provenance mismatch * Jaeger: Handle gzip, deflate, and brotli compressed API responses * Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL mgr-push was updated to version 5.2.5: * Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings spacewalk-client-tools was updated to version 5.2.7: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 15 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-15-2026-4585 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-4585 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 15 (aarch64 ppc64le s390x x86_64) * grafana-12.4.10-150002.4.27.1 * venv-salt-minion-3006.0-150002.5.22.1 * golang-github-prometheus-prometheus-3.13.2-150002.3.19.1 * mgrctl-5.2.17-150002.3.20.1 * grafana-debuginfo-12.4.10-150002.4.27.1 * mgrctl-debuginfo-5.2.17-150002.3.20.1 * firewalld-prometheus-config-0.2-150002.3.19.1 * golang-github-prometheus-prometheus-debuginfo-3.13.2-150002.3.19.1 * SUSE Multi-Linux Manager Client Tools for SLE 15 (noarch) * mgrctl-lang-5.2.17-150002.3.20.1 * mgr-push-5.2.5-150002.3.12.1 * python3-spacewalk-client-tools-5.2.7-150002.3.12.1 * spacecmd-5.2.10-150002.3.15.1 * mgrctl-zsh-completion-5.2.17-150002.3.20.1 * spacewalk-client-tools-5.2.7-150002.3.12.1 * python3-mgr-push-5.2.5-150002.3.12.1 * mgrctl-bash-completion-5.2.17-150002.3.20.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (aarch64 ppc64le s390x x86_64) * venv-salt-minion-3006.0-150002.5.22.1 * mgrctl-5.2.17-150002.3.20.1 * mgrctl-debuginfo-5.2.17-150002.3.20.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (noarch) * mgrctl-bash-completion-5.2.17-150002.3.20.1 * mgrctl-zsh-completion-5.2.17-150002.3.20.1 * mgrctl-lang-5.2.17-150002.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2025-61686.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42127.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8595.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://www.suse.com/security/cve/CVE-2026-9029.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268868 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1270711 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271557 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1272328 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:50:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:50:04 -0000 Subject: SUSE-SU-2026:4584-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147820458.421.17261740476939368906@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4584-1 Release Date: 2026-10-08T08:23:06Z Rating: important References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Desktop 12 * SUSE Linux Enterprise Desktop 12 SP1 * SUSE Linux Enterprise Desktop 12 SP2 * SUSE Linux Enterprise Desktop 12 SP3 * SUSE Linux Enterprise Desktop 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Multi-Linux Manager Client Tools for SLE 12 An update that solves 32 vulnerabilities, contains one feature and has 16 security fixes can now be installed. ## Description: This update fixes the following issues: mgr-push was updated to version 5.2.5: * Removed token based authentication mechanism for package_push (bsc#1230949) spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings spacewalk-client-tools was updated to version 5.2.7:: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 12 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-12-2026-4584 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 12 (aarch64 ppc64le s390x x86_64) * venv-salt-minion-3006.0-120002.5.22.2 * mgrctl-5.2.17-120002.3.18.1 * mgrctl-debuginfo-5.2.17-120002.3.18.1 * SUSE Multi-Linux Manager Client Tools for SLE 12 (noarch) * mgr-push-5.2.5-120002.3.12.1 * python2-mgr-push-5.2.5-120002.3.12.1 * python2-spacewalk-client-tools-5.2.7-120002.3.12.1 * mgrctl-zsh-completion-5.2.17-120002.3.18.1 * spacecmd-5.2.10-120002.3.15.1 * mgrctl-lang-5.2.17-120002.3.18.1 * mgrctl-bash-completion-5.2.17-120002.3.18.1 * spacewalk-client-tools-5.2.7-120002.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:50:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:50:58 -0000 Subject: SUSE-SU-2026:4583-1: moderate: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147825834.421.15523645753502319638@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4583-1 Release Date: 2026-10-08T08:21:48Z Rating: moderate References: * bsc#1218722 * bsc#1230949 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270285 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Liberty Linux 7 * SUSE Liberty Linux 7 LTSS * SUSE Liberty Linux LTSS 7 for Oracle Linux * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones An update that solves 31 vulnerabilities, contains one feature and has seven security fixes can now be installed. ## Description: This update fixes the following issues: mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9-0 * Update translation strings spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings venv-salt-minion: * CVE-2026-13346: Arbitrary file installation via malicious package indexes. Remove ensurepip with bundled .whl files. (bsc#1273094) * CVE-2026-0864: Normalize all line endings (CR, CRLF, and LF) in configparser (bsc#1269066, gh#python/cpython#143927) * CVE-2026-1502: reject CR/LF in HTTP tunnel request headers (bsc#1261969, gh#python/cpython#146211) * CVE-2026-3276: Fix O(n^2) canonical ordering in unicodedata.normalize() (bsc#1267581, gh#python/cpython#149079) * CVE-2026-4360: Pass filter_function to TarFile._extract_one() during .extract() (bsc#1269959, gh#python/cpython#151987) * CVE-2026-4786: fix webbrowser %action substitution bypass of dash-prefix check (bsc#1262319, gh#python/cpython#148169) * CVE-2026-6019: protect against HTML injection by Base64-encoding cookie values embedded in JS (bsc#1262654, gh#python/cpython#90309) * CVE-2026-6100: prevent dangling pointer, which can end in the use-after-free error (bsc#1262098, gh#python/cpython#148395) * CVE-2026-7210: Use XML_SetHashSalt16Bytes in pyexpat/_elementtree when possible (bsc#1264962, gh#python/cpython#149018) * CVE-2026-7774: tarfile.data_filter: validate written link target (bsc#1267821, gh#149486) * CVE-2026-8328: Make ftplib not trust the PASV response (bsc#1265268) * CVE-2026-11940: fix the symlink escape via tarfile hardlink-extraction fallback (bsc#1268977) * CVE-2026-11972: Make tarfile._Stream.seek break at EOF (bsc#1269788, gh#python/cpython#151981) * CVE-2026-15308: Fix quadratic complexity in incremental parsing in HTMLParser (bsc#1271192, gh#python/cpython#153030) * CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669) * CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442) * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429) * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599, gh#pypa/pip#13777) * CVE-2024-22195: Fix compiler error when checking if required blocks in parent templates are xmlattr filter does not allow keys with spaces. (bsc#1218722) * CVE-2026-45409: Specially crafted inputs to idna.encode() can bypass earlier security fix (bsc#1265413) * CVE-2026-44431: sensitive information disclosure due to sensitive headers being forwarded across origins in proxied low-level redirects (bsc#1265267) * CVE-2026-49825: The known link attributes in `lxml.html.defs.link_attrs` were missing `xlink:href`, which can be used for URL bypass attributes in embedded SVG/MathML/etc. content. (bsc#1270285) https://github.com/fedora- python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f * CVE-2026-41066: This release fixes a possible external entity injection (XXE) vulnerability in `iterparse()` and the `ETCompatXMLParser`. (bsc#1263254) * CVE-2026-3446: Preventing ignoring excess Base64 data after the first padded quad in non-strict (default) mode. (bsc#1261970, gh#python/cpython#145264) * CVE-2026-3479: pkgutil.get_data() has the same security model as open(). The documented limitations ensure compatibility with non-filesystem loaders; Python doesn't check that. (bsc#1259989, gh#python/cpython#146121) * CVE-2026-27459: large cookie value can lead to a buffer overflow (bsc#1271428) * CVE-2026-49853: authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient (bsc#1268395) * CVE-2026-49854: out-of-bounds memory access via C extension (bsc#1268396) * CVE-2026-49855: AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) (bsc#1268397) * CVE-2026-40475: improper input handling of null bytes can lead to silent data truncation and security-state inconsistency (bsc#1262803) * CVE-2025-13836: limit http.client response read in NXOS modules (bsc#1254400) * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-RES-7-2026-4583 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones (noarch) * spacecmd-5.2.10-70002.3.15.1 * python2-mgr-push-5.2.5-70002.3.12.2 * python2-spacewalk-client-tools-5.2.7-70002.3.12.1 * spacewalk-client-tools-5.2.7-70002.3.12.1 * mgr-push-5.2.5-70002.3.12.2 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 7, RHEL and clones (aarch64 ppc64le x86_64) * venv-salt-minion-3006.0-70002.5.22.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:52:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:52:04 -0000 Subject: SUSE-SU-2026:4582-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147832411.421.6224042249714462303@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4582-1 Release Date: 2026-10-08T08:20:36Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-9-2026-4582 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-90002.3.15.1 * venv-salt-minion-3006.0-90002.5.22.1 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 9, RHEL and clones (noarch) * spacecmd-5.2.10-90002.3.15.1 * mgrctl-bash-completion-5.2.17-90002.3.15.1 * scap-security-guide-redhat-0.1.80-90002.3.12.1 * mgrctl-zsh-completion-5.2.17-90002.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:53:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:53:08 -0000 Subject: SUSE-SU-2026:4581-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147838832.421.13868829582332925835@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4581-1 Release Date: 2026-10-08T08:18:32Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-8-2026-4581 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones (aarch64 ppc64le x86_64) * mgrctl-5.2.17-80002.3.15.3 * venv-salt-minion-3006.0-80002.5.22.3 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 8, RHEL and clones (noarch) * scap-security-guide-redhat-0.1.80-80002.3.12.4 * spacecmd-5.2.10-80002.3.15.3 * mgrctl-zsh-completion-5.2.17-80002.3.15.3 * mgrctl-bash-completion-5.2.17-80002.3.15.3 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:54:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:54:14 -0000 Subject: SUSE-SU-2026:4580-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147845414.421.5791939825679513437@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4580-1 Release Date: 2026-10-08T08:17:25Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#ECO-3319 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones An update that solves 32 vulnerabilities, contains two features and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: scap-security-guide was updated to version 0.1.79: * Version 0.1.79 (jsc#ECO-3319) * Added SLE16 profiles to the build * Create SLE16 HIPAA profile * Create SLE16 PCI DSS 4 profile * Use Sequoia in RHEL 10 instead of GPG * New Profile for RHEL10: BSI * Move RHEL Control files to product files * Update RHEL 9 CCN profile * Various updates for SLE 12/15 spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones zypper in -t patch SUSE-MultiLinuxManagerTools-EL-10-2026-4580 ## Package List: * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-100002.1.9.1 * venv-salt-minion-3006.0-100002.1.13.1 * SUSE Multi-Linux Manager Client Tools for SUSE Liberty Linux 10, RHEL and clones (noarch) * mgrctl-bash-completion-5.2.17-100002.1.9.1 * scap-security-guide-redhat-0.1.80-100002.1.6.1 * spacecmd-5.2.10-100002.1.9.1 * mgrctl-zsh-completion-5.2.17-100002.1.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/ECO-3319 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:55:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:55:20 -0000 Subject: SUSE-SU-2026:4579-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147852010.421.16437595864357035636@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4579-1 Release Date: 2026-10-08T08:16:09Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Debian 13 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Debian 13 zypper in -t patch SUSE-MultiLinuxManagerTools-Debian-13-2026-4579 ## Package List: * SUSE Multi-Linux Manager Client Tools for Debian 13 (amd64 arm64) * mgrctl-5.2.17-130002.2.9.1 * venv-salt-minion-3006.0-130002.2.13.1 * SUSE Multi-Linux Manager Client Tools for Debian 13 (all) * mgrctl-bash-completion-5.2.17-130002.2.9.1 * mgrctl-fish-completion-5.2.17-130002.2.9.1 * mgrctl-zsh-completion-5.2.17-130002.2.9.1 * spacecmd-5.2.10-130002.2.9.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 16:56:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 16:56:28 -0000 Subject: SUSE-SU-2026:4578-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179147858825.421.2145223484731552222@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:4578-1 Release Date: 2026-10-08T08:15:01Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1266481 * bsc#1266669 * bsc#1267261 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271428 * bsc#1271613 * bsc#1273094 * bsc#1273144 * jsc#MSQA-1060 Cross-References: * CVE-2024-22195 * CVE-2025-13836 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8643 CVSS scores: * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Multi-Linux Manager Client Tools for Debian 12 An update that solves 32 vulnerabilities, contains one feature and has 15 security fixes can now be installed. ## Description: This update fixes the following issues: spacecmd was updated to version 5.2.10: * Version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Version 5.2.9: * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) - fixed in 5.2.17-0 Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues fixed: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for Debian 12 zypper in -t patch SUSE-MultiLinuxManagerTools-Debian-12-2026-4578 ## Package List: * SUSE Multi-Linux Manager Client Tools for Debian 12 (amd64 arm64) * venv-salt-minion-3006.0-120002.3.30.1 * mgrctl-5.2.17-120002.3.23.1 * SUSE Multi-Linux Manager Client Tools for Debian 12 (all) * mgrctl-bash-completion-5.2.17-120002.3.23.1 * spacecmd-5.2.10-120002.3.23.1 * mgrctl-fish-completion-5.2.17-120002.3.23.1 * mgrctl-zsh-completion-5.2.17-120002.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:30:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:30:47 -0000 Subject: SUSE-SU-2026:24090-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149144709.3924.8636927069202012566@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24090-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-683 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_11-debugsource-17-1.1 * kernel-livepatch-6_4_0-34-default-debuginfo-17-1.1 * kernel-livepatch-6_4_0-34-default-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:31:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:31:17 -0000 Subject: SUSE-SU-2026:24089-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149147787.3924.234856586076597401@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24089-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-682 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-17-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-17-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:31:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:31:46 -0000 Subject: SUSE-SU-2026:24088-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149150680.3924.7571764366547192583@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24088-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-681 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-debuginfo-15-1.1 * kernel-livepatch-6_4_0-36-default-15-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-15-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:32:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:32:14 -0000 Subject: SUSE-SU-2026:24087-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149153478.3924.5028531883991633077@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24087-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-680 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-38-default-13-1.2 * kernel-livepatch-MICRO-6-0_Update_14-debugsource-13-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-13-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:32:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:32:41 -0000 Subject: SUSE-SU-2026:24086-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149156144.3924.9955894791961846049@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24086-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-679 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_16-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-default-12-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:33:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:33:13 -0000 Subject: SUSE-SU-2026:24085-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149159311.3924.3247981143248437465@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24085-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-678 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-40-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-40-default-11-1.1 * kernel-livepatch-MICRO-6-0_Update_17-debugsource-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:33:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:33:41 -0000 Subject: SUSE-SU-2026:24084-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149162151.3924.11202032299055189521@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24084-1 Release Date: 2026-10-06T08:53:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-677 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-10-1.1 * kernel-livepatch-6_4_0-41-default-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:34:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:34:09 -0000 Subject: SUSE-SU-2026:24083-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149164983.3924.7601253486248264304@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24083-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-676 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-42-default-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0_Update_19-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-default-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:34:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:34:37 -0000 Subject: SUSE-SU-2026:24082-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149167756.3924.12165576755375462507@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24082-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-675 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:35:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:35:04 -0000 Subject: SUSE-SU-2026:24081-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149170480.3924.7945933790077191794@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24081-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-674 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-7-1.1 * kernel-livepatch-6_4_0-44-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:35:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:35:33 -0000 Subject: SUSE-SU-2026:24080-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149173334.3924.1832986011848990398@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24080-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-673 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-7-1.1 * kernel-livepatch-6_4_0-45-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:36:01 -0000 Subject: SUSE-SU-2026:24079-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149176135.3924.8929028924859533842@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24079-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-672 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-7-1.1 * kernel-livepatch-6_4_0-46-default-debuginfo-7-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:36:30 -0000 Subject: SUSE-SU-2026:24078-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149179063.3924.4439142846092505251@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24078-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-671 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-6-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:36:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:36:59 -0000 Subject: SUSE-SU-2026:24077-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149181963.3924.2453880851454750640@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24077-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-670 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-5-1.1 * kernel-livepatch-6_4_0-48-default-5-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:37:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:37:24 -0000 Subject: SUSE-SU-2026:24076-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149184412.3924.14715504017349769318@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24076-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-669 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_26-debugsource-4-1.1 * kernel-livepatch-6_4_0-49-default-debuginfo-4-1.1 * kernel-livepatch-6_4_0-49-default-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:37:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:37:49 -0000 Subject: SUSE-SU-2026:24075-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149186957.3924.15216154160218174282@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24075-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-668 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_27-debugsource-4-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-default-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:38:05 -0000 Subject: SUSE-SU-2026:24074-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149188517.3924.7891967444261090529@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24074-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-667 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-debuginfo-3-1.1 * kernel-livepatch-6_4_0-51-default-3-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:38:11 -0000 Subject: SUSE-SU-2026:24073-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149189121.3924.3128385097718935471@35d72aa18c5b> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24073-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-666 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-default-2-1.1 * kernel-livepatch-6_4_0-52-default-debuginfo-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:38:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:38:38 -0000 Subject: SUSE-SU-2026:24072-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149191870.3924.8481796374801649897@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24072-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-665 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-36-rt-17-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-17-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-17-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:39:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:39:06 -0000 Subject: SUSE-SU-2026:24071-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149194657.3924.5551057706709859827@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24071-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-664 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-13-1.1 * kernel-livepatch-6_4_0-37-rt-13-1.1 * kernel-livepatch-6_4_0-37-rt-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:39:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:39:33 -0000 Subject: SUSE-SU-2026:24070-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149197374.3924.5900776896945446800@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24070-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-663 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-13-1.1 * kernel-livepatch-6_4_0-38-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-38-rt-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:40:01 -0000 Subject: SUSE-SU-2026:24069-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149200188.3924.7662794329811631142@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24069-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-662 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-12-1.1 * kernel-livepatch-6_4_0-39-rt-12-1.1 * kernel-livepatch-6_4_0-39-rt-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:40:30 -0000 Subject: SUSE-SU-2026:24068-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149203096.3924.10609935551250903175@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24068-1 Release Date: 2026-10-06T08:53:21Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-661 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-40-rt-debuginfo-11-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-40-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:40:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:40:59 -0000 Subject: SUSE-SU-2026:24067-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149205955.3924.16569583253067178132@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24067-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-660 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-10-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-10-1.1 * kernel-livepatch-6_4_0-41-rt-10-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:41:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:41:27 -0000 Subject: SUSE-SU-2026:24066-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149208719.3924.931801691490596376@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24066-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-659 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-8-1.1 * kernel-livepatch-6_4_0-42-rt-8-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:41:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:41:56 -0000 Subject: SUSE-SU-2026:24065-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149211604.3924.6777650864726871326@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24065-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-658 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-7-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-43-rt-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:42:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:42:23 -0000 Subject: SUSE-SU-2026:24064-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149214307.3924.7293071629311649332@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24064-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-657 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-7-1.2 * kernel-livepatch-6_4_0-45-rt-debuginfo-7-1.2 * kernel-livepatch-6_4_0-45-rt-7-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:42:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:42:52 -0000 Subject: SUSE-SU-2026:24063-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149217212.3924.14738352028734450955@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24063-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-656 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-46-rt-debuginfo-7-1.1 * kernel-livepatch-6_4_0-46-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:43:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:43:20 -0000 Subject: SUSE-SU-2026:24062-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149220001.3924.12286449530710109455@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24062-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-655 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-6-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-6-1.1 * kernel-livepatch-6_4_0-47-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:43:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:43:47 -0000 Subject: SUSE-SU-2026:24061-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149222734.3924.5799229548183461587@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24061-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-654 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-5-1.1 * kernel-livepatch-6_4_0-48-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:44:13 -0000 Subject: SUSE-SU-2026:24060-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149225347.3924.15154451098873401044@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24060-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-653 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-49-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-4-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:44:38 -0000 Subject: SUSE-SU-2026:24059-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149227872.3924.18118867577343954015@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24059-1 Release Date: 2026-10-06T08:53:20Z Rating: important References: * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 17 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-652 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-4-1.1 * kernel-livepatch-6_4_0-50-rt-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:44:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:44:54 -0000 Subject: SUSE-SU-2026:24058-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149229477.3924.6424564063660808700@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24058-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1272391 * bsc#1273003 * bsc#1273012 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63944 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-651 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-51-rt-3-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-3-1.1 * kernel-livepatch-6_4_0-51-rt-debuginfo-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:45:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:45:05 -0000 Subject: SUSE-SU-2026:24057-1: important: Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179149230548.3924.15111246243219293118@35d72aa18c5b> # Security update for the Linux Kernel RT (Live Patch 29 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24057-1 Release Date: 2026-10-06T07:30:55Z Rating: important References: * bsc#1277506 Cross-References: * CVE-2026-74612 CVSS scores: * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-52.1 fixes one security issue: The following security issue was fixed: * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-650 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-52-rt-2-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_29-debugsource-2-1.1 * kernel-livepatch-6_4_0-52-rt-debuginfo-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:45:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:45:16 -0000 Subject: SUSE-SU-2026:24056-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179149231667.3924.11128798676990316713@35d72aa18c5b> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24056-1 Release Date: 2026-10-05T14:00:24Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-649 ## Package List: * SUSE Linux Micro 6.0 (aarch64 x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.4.0_52-1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:46:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:46:51 -0000 Subject: SUSE-SU-2026:24055-1: important: Security update 5.2.1 for Multi-Linux Manager Client Tools Message-ID: <179149241159.3924.12464745847204495932@35d72aa18c5b> # Security update 5.2.1 for Multi-Linux Manager Client Tools Announcement ID: SUSE-SU-2026:24055-1 Release Date: 2026-10-08T09:47:48Z Rating: important References: * bsc#1218722 * bsc#1252286 * bsc#1254400 * bsc#1257151 * bsc#1257599 * bsc#1259989 * bsc#1261969 * bsc#1261970 * bsc#1262098 * bsc#1262187 * bsc#1262319 * bsc#1262429 * bsc#1262492 * bsc#1262654 * bsc#1262803 * bsc#1263254 * bsc#1263330 * bsc#1263442 * bsc#1263822 * bsc#1263823 * bsc#1264962 * bsc#1265267 * bsc#1265268 * bsc#1265413 * bsc#1265525 * bsc#1265763 * bsc#1266481 * bsc#1266608 * bsc#1266669 * bsc#1267261 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1267581 * bsc#1267821 * bsc#1267980 * bsc#1268325 * bsc#1268395 * bsc#1268396 * bsc#1268397 * bsc#1268649 * bsc#1268755 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269841 * bsc#1269856 * bsc#1269959 * bsc#1269966 * bsc#1270033 * bsc#1270285 * bsc#1270398 * bsc#1270399 * bsc#1271192 * bsc#1271330 * bsc#1271428 * bsc#1271613 * bsc#1272008 * bsc#1272102 * bsc#1272427 * bsc#1273094 * bsc#1273144 * bsc#1274217 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2024-22195 * CVE-2025-13836 * CVE-2025-4673 * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-1229 * CVE-2026-13346 * CVE-2026-14199 * CVE-2026-1502 * CVE-2026-15308 * CVE-2026-1703 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-27459 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-33814 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-39821 * CVE-2026-39882 * CVE-2026-40181 * CVE-2026-40475 * CVE-2026-41066 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-4360 * CVE-2026-44431 * CVE-2026-44990 * CVE-2026-45409 * CVE-2026-4786 * CVE-2026-49825 * CVE-2026-49853 * CVE-2026-49854 * CVE-2026-49855 * CVE-2026-53606 * CVE-2026-56852 * CVE-2026-6019 * CVE-2026-6100 * CVE-2026-6357 * CVE-2026-7210 * CVE-2026-73501 * CVE-2026-7774 * CVE-2026-8328 * CVE-2026-8609 * CVE-2026-8643 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-22195 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2024-22195 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2025-13836 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-13836 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-13836 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-1502 ( SUSE ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-1502 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-1502 ( NVD ): 5.7 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-27459 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-27459 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-27459 ( NVD ): 7.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-27459 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-27459 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-40475 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40475 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41066 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-41066 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41066 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-44431 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-44431 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-44431 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-44431 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-45409 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45409 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45409 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-45409 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-4786 ( SUSE ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-4786 ( NVD ): 7.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4786 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-49825 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N * CVE-2026-49853 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N * CVE-2026-49853 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-49854 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49854 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-49855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-49855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6100 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6100 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6100 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6100 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Client Tools for SLE 16 An update that solves 54 vulnerabilities, contains two features and has 20 fixes can now be installed. ## Description: This update fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 grafana was updated to version 12.4.10: * Security issues: * CVE-2026-17183: Fixed exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269841) * CVE-2026-17033: Fixed stored cross-site scripting risks via malicious Alertmanager generator URLs (bsc#1276426) * CVE-2026-73501: Fixed fail-open authentication bypass in kin-openapi default handlers (bsc#1276973) * CVE-2026-19475: Fixed DoS risks in PostgreSQL Datasource by checking timeGroup macros (bsc#1278307) * CVE-2026-14199: Fixed auth bypass or session takeover via Auth Proxy cache key collision (bsc#1278322) * CVE-2026-19197: Fixed access control and authorization checks in dashboard snapshots (bsc#1277025) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm (bsc#1272008) * CVE-2026-41178: Fixed denial-of-service risks in OpenTelemetry baggage parsing (bsc#1276658) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274217) * CVE-2026-33814: Fixed infinite loop in HTTP/2 transport during framesize check (bsc#1265763) * CVE-2026-8609: Fixed pre-authentication denial-of-service risks in OAuth login routes (bsc#1271330) * CVE-2026-1229: Fixed incorrect value calculation in ecc/p384 Package (bsc#1265525, bsc#1262187) * CVE-2026-21723: Fixed out-of-memory and denial-of-service risks in templates test endpoint (bsc#1272427) * CVE-2026-41606: Fixed denial-of-service risks from nested messages in Apache Thrift parser (bsc#1263330) * Bug fixes and changes: * Dashboards: Fix adhoc and groupby variable datasource on UI import * Dashboards: Fix version dates and user display names in the legacy version history page * Dashboard Import: Labels in v2 schema * Azure Monitor: fix migration for dimension filters * Dashboards: Get annotations and dashboard endpoint performance improvements * DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Alerting: Add protected fields authorization check to provisioning API * Alerting: Return 403 instead of 500 on contact point provenance mismatch * Jaeger: Handle gzip, deflate, and brotli compressed API responses * Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL spacecmd was updated to version 5.2.10: * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) * Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues fixed: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) Bug fixes and changes: * Version 5.2.17-0: * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) * Version 5.2.16-0: * Reverted usage of sdnotify as it causes issues with Podman (bsc#1270399, bsc#1270398) * Version 5.2.15-0: * Added requirement for at least Podman v4.7.2 * Send READY notification to systemd only once healthy (bsc#1263823) * Version 5.2.14-0: * Include the server environment file in the backup (bsc#1268649) * Added mgradm commands for SSL CA and certificate rotation * Version 5.2.13-0: * Check and warn if CA certificate isn't marked as critical * Disable SSL on database during split (bsc#1267980) * Do not call uyuni-postgres-config.sh in mgradm (bsc#1267980) * Check backup status only after database is started (bsc#1262492) venv-salt-minion: * Security issues: * CVE-2026-13346: Fixed an issue where malicious package indexes could install unauthorized files (bsc#1273094) * CVE-2026-0864: Fixed custom configuration injection risks caused by improper line-ending validation (bsc#1269066) * CVE-2026-1502: Fixed web request header manipulation to bypass proxy security protections (bsc#1261969) * CVE-2026-3276: Fixed potential system slow down or freeze when processing crafted Unicode text (bsc#1267581) * CVE-2026-4360: Fixed directory escape risks during archive extraction (bsc#1269959) * CVE-2026-4786: Fixed command injection risks when processing malicious browser links (bsc#1262319) * CVE-2026-6019: Fixed a flaw where cookies could be manipulated to run malicious script (bsc#1262654) * CVE-2026-6100: Fixed crashes or unauthorized code execution during file decompression (bsc#1262098) * CVE-2026-7210: Fixed system freezes triggered by parsing malicious XML files (bsc#1264962) * CVE-2026-7774: Fixed path traversal risks where malicious archives write files outside targets (bsc#1267821) * CVE-2026-8328: Fixed connections being redirected to unsafe systems by compromised FTP servers (bsc#1265268) * CVE-2026-11940: Fixed a bug where extracting malicious archives could overwrite system files (bsc#1268977) * CVE-2026-11972: Fixed infinite loop and system freeze risks during archive decompression (bsc#1269788) * CVE-2026-15308: Fixed crashes when parsing web pages with repetitive, incomplete structures (bsc#1271192) * CVE-2026-8643: Fixed malicious package installs overwriting arbitrary local files (bsc#1266669) * CVE-2026-6357: Fixed package self-updates loading unauthorized modules during install (bsc#1263442) * CVE-2026-3219: Fixed validation failures where combined ZIP archives were not rejected (bsc#1262429) * CVE-2026-1703: Fixed package installations writing files outside target directories (bsc#1257599) * CVE-2024-22195: Fixed HTML template manipulation allowing unauthorized script execution (bsc#1218722) * CVE-2026-45409: Fixed domain name encoding bypass allowing imitation websites (bsc#1265413) * CVE-2026-44431: Fixed data leaks where sensitive headers were sent to external origins (bsc#1265267) * CVE-2026-49825: Fixed missing script cleanup from namespaces in web content (bsc#1270285) * CVE-2026-41066: Fixed leakage of private system data via malicious XML file parsing (bsc#1263254) * CVE-2026-3446: Fixed validation bypasses where hidden excess Base64 data was ignored (bsc#1261970) * CVE-2026-3479: Fixed path traversal risks when loading packages from insecure locations (bsc#1259989) * CVE-2026-27459: Fixed buffer overflow vulnerabilities caused by large cookie headers (bsc#1271428) * CVE-2026-49853: Fixed credentials leakage during redirects to cross-origin servers (bsc#1268395) * CVE-2026-49854: Fixed crashes or unauthorized memory access in compiled components (bsc#1268396) * CVE-2026-49855: Fixed crashes caused by excessively compressed files exhausting memory (bsc#1268397) * CVE-2026-40475: Fixed silent data truncation where hidden null characters bypass checks (bsc#1262803) * CVE-2025-13836: Fixed memory exhaustion risk by limiting HTTP response reading size (bsc#1254400) * Bug fixes and changes: * Updated bundled python module pip to 25.0.1 * Updated bundled python module jinja2 to 3.1.6 * Updated bundled python module lxml to 6.1.1 * Prevent broken Salt Bundle on Ubuntu due regression in "tar" package from Ubuntu repositories (bsc#1271613) * Remove unused paramiko python module from the bundle. * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) ## Special Instructions and Notes: ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE 16 zypper in -t patch Multi-Linux-ManagerTools-SLE-16-6 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE 16 (aarch64 ppc64le s390x x86_64) * mgrctl-5.2.17-160002.1.1 * golang-github-prometheus-prometheus-debuginfo-3.13.2-160002.1.1 * grafana-debuginfo-12.4.10-160002.1.1 * golang-github-prometheus-prometheus-3.13.2-160002.1.1 * grafana-12.4.10-160002.1.1 * mgrctl-debuginfo-5.2.17-160002.1.1 * venv-salt-minion-3006.0-160002.7.1 * SUSE Multi-Linux Manager Client Tools for SLE 16 (noarch) * spacecmd-5.2.10-160002.1.1 * mgrctl-bash-completion-5.2.17-160002.1.1 * mgrctl-lang-5.2.17-160002.1.1 * mgrctl-zsh-completion-5.2.17-160002.1.1 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2024-22195.html * https://www.suse.com/security/cve/CVE-2025-13836.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-1502.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-27459.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-40475.html * https://www.suse.com/security/cve/CVE-2026-41066.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-44431.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-45409.html * https://www.suse.com/security/cve/CVE-2026-4786.html * https://www.suse.com/security/cve/CVE-2026-49825.html * https://www.suse.com/security/cve/CVE-2026-49853.html * https://www.suse.com/security/cve/CVE-2026-49854.html * https://www.suse.com/security/cve/CVE-2026-49855.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6100.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://bugzilla.suse.com/show_bug.cgi?id=1218722 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1254400 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261969 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262098 * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1262319 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1262492 * https://bugzilla.suse.com/show_bug.cgi?id=1262654 * https://bugzilla.suse.com/show_bug.cgi?id=1262803 * https://bugzilla.suse.com/show_bug.cgi?id=1263254 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1263442 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1263823 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265267 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1265413 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267980 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268395 * https://bugzilla.suse.com/show_bug.cgi?id=1268396 * https://bugzilla.suse.com/show_bug.cgi?id=1268397 * https://bugzilla.suse.com/show_bug.cgi?id=1268649 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270285 * https://bugzilla.suse.com/show_bug.cgi?id=1270398 * https://bugzilla.suse.com/show_bug.cgi?id=1270399 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271428 * https://bugzilla.suse.com/show_bug.cgi?id=1271613 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1273094 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:03 -0000 Subject: SUSE-SU-2026:4595-1: important: Security update for the Linux Kernel Message-ID: <179149254364.3924.3995083001798268729@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4595-1 Release Date: 2026-10-08T14:26:42Z Rating: important References: * bsc#1235944 * bsc#1261604 * bsc#1263072 * bsc#1264734 * bsc#1267023 * bsc#1268659 * bsc#1269000 * bsc#1269004 * bsc#1269238 * bsc#1269242 * bsc#1269306 * bsc#1269655 * bsc#1269731 * bsc#1269792 * bsc#1271825 * bsc#1271830 * bsc#1272179 * bsc#1272182 * bsc#1272230 * bsc#1272385 * bsc#1272390 * bsc#1272756 * bsc#1272868 * bsc#1272877 * bsc#1273060 * bsc#1273105 * bsc#1273276 * bsc#1273303 * bsc#1273311 * bsc#1273422 * bsc#1273484 * bsc#1273488 * bsc#1273523 * bsc#1273555 * bsc#1273742 * bsc#1273745 * bsc#1273748 * bsc#1273762 * bsc#1273774 * bsc#1273869 * bsc#1273882 * bsc#1273891 * bsc#1273930 * bsc#1273944 * bsc#1273966 * bsc#1273995 * bsc#1274014 * bsc#1274031 * bsc#1274041 * bsc#1274208 * bsc#1274274 * bsc#1274497 * bsc#1274547 * bsc#1274550 * bsc#1274696 * bsc#1274705 * bsc#1274752 * bsc#1274753 * bsc#1274754 * bsc#1274859 * bsc#1274888 * bsc#1274898 * bsc#1274902 * bsc#1274908 * bsc#1274941 * bsc#1275161 * bsc#1275472 * bsc#1275474 * bsc#1275506 * bsc#1275528 * bsc#1275687 * bsc#1275782 * bsc#1275798 * bsc#1275827 * bsc#1275867 * bsc#1275886 * bsc#1275905 * bsc#1276350 * bsc#1276665 * bsc#1276931 * bsc#1277073 * bsc#1277155 * bsc#1277285 * bsc#1277391 * bsc#1277408 * bsc#1277523 * bsc#1277571 * bsc#1277678 * bsc#1277860 * bsc#1278088 * bsc#1278233 * bsc#1278236 * bsc#1279554 * bsc#1279813 Cross-References: * CVE-2024-57841 * CVE-2026-23451 * CVE-2026-31502 * CVE-2026-43456 * CVE-2026-45968 * CVE-2026-52910 * CVE-2026-52912 * CVE-2026-52929 * CVE-2026-52977 * CVE-2026-53059 * CVE-2026-53163 * CVE-2026-53260 * CVE-2026-53264 * CVE-2026-53381 * CVE-2026-53388 * CVE-2026-63801 * CVE-2026-63823 * CVE-2026-63827 * CVE-2026-63887 * CVE-2026-63888 * CVE-2026-63920 * CVE-2026-63992 * CVE-2026-64002 * CVE-2026-64007 * CVE-2026-64010 * CVE-2026-64011 * CVE-2026-64015 * CVE-2026-64047 * CVE-2026-64048 * CVE-2026-64098 * CVE-2026-64109 * CVE-2026-64114 * CVE-2026-64115 * CVE-2026-64137 * CVE-2026-64266 * CVE-2026-64268 * CVE-2026-64304 * CVE-2026-64355 * CVE-2026-64423 * CVE-2026-64450 * CVE-2026-64481 * CVE-2026-64541 * CVE-2026-64543 * CVE-2026-64562 * CVE-2026-64563 * CVE-2026-64572 * CVE-2026-64577 * CVE-2026-64581 * CVE-2026-64593 * CVE-2026-68121 * CVE-2026-68136 * CVE-2026-68138 * CVE-2026-68160 * CVE-2026-68202 * CVE-2026-68397 * CVE-2026-68398 * CVE-2026-68417 * CVE-2026-68426 * CVE-2026-68480 * CVE-2026-72020 * CVE-2026-72069 * CVE-2026-72072 * CVE-2026-72123 * CVE-2026-72135 * CVE-2026-72251 * CVE-2026-72262 * CVE-2026-72288 * CVE-2026-72289 * CVE-2026-72389 * CVE-2026-74345 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74390 * CVE-2026-74394 * CVE-2026-74454 * CVE-2026-74488 * CVE-2026-74496 * CVE-2026-74518 * CVE-2026-74537 * CVE-2026-74581 * CVE-2026-74582 * CVE-2026-74669 * CVE-2026-74695 * CVE-2026-80722 CVSS scores: * CVE-2024-57841 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-57841 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2024-57841 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-57841 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23451 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23451 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23451 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31502 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31502 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43456 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43456 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45968 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45968 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52910 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52910 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52910 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52910 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52929 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52929 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52977 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52977 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53059 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-53059 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-53059 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53163 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53260 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53260 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53264 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53381 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53381 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53381 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63801 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63801 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63823 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63823 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63823 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63827 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63827 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63827 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63992 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63992 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63992 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64002 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64002 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64002 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64007 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64007 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64007 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64010 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64010 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64010 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64015 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64047 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64047 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64048 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64048 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64048 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64098 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64098 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64098 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64109 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64109 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64109 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64115 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64115 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64115 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64137 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64137 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64137 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64268 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64268 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64304 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64304 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64304 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64355 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64355 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64450 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64450 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64450 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64481 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64481 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64481 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64541 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64541 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64543 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64543 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64562 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64562 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64563 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64563 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64572 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64572 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64577 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64577 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64577 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64581 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64581 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64581 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64593 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64593 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68136 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68136 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68136 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68138 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68138 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68160 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68160 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-68160 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68397 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68397 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68398 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68398 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68417 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68417 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68426 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68426 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68480 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-72020 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72020 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72020 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72069 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72069 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72069 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72072 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72072 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72123 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72123 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72123 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72251 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72251 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72251 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72262 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72288 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72288 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72288 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72289 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72289 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72289 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72389 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72389 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72389 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74345 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74345 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74345 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74454 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74454 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74454 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74488 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74488 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74496 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74496 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74518 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74518 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74537 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74537 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74581 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74581 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74582 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74582 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74582 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74669 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74695 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74695 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 84 vulnerabilities and has 10 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). * CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). * CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072). * CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). * CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023). * CVE-2026-52910: bpf: Free reuseport cBPF prog after RCU grace period (bsc#1268659). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004). * CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242). * CVE-2026-53059: dm log: fix out-of-bounds write due to region_count overflow (bsc#1269655). * CVE-2026-53163: locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (bsc#1269306). * CVE-2026-53264: net/sched: act_api: use RCU with deferred freeing for action lifecycle (bsc#1269238). * CVE-2026-53381: virtiofs: fix UAF on submount umount (bsc#1271830). * CVE-2026-63801: tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done (bsc#1272230). * CVE-2026-63823: keys: Pin request_key_auth payload in instantiate paths (bsc#1272182). * CVE-2026-63827: apparmor: fix use-after-free in rawdata dedup loop (bsc#1272179). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272385). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272390). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1272877). * CVE-2026-63992: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). * CVE-2026-64002: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). * CVE-2026-64007: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). * CVE-2026-64010: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). * CVE-2026-64015: security/keys: fix missed RCU read section on lookup (bsc#1273762). * CVE-2026-64047: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). * CVE-2026-64048: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484). * CVE-2026-64098: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). * CVE-2026-64109: af_unix: Peek the queue synchronized (bsc#1273748). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). * CVE-2026-64115: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). * CVE-2026-64268: RDMA/siw: bound Read Response placement to the RREAD length (bsc#1273276). * CVE-2026-64304: crypto: qat - validate RSA CRT component lengths (bsc#1273944). * CVE-2026-64355: bpf: Reject fragmented frames in devmap (bsc#1273422). * CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction (bsc#1274274). * CVE-2026-64450: tipc: fix out-of-bounds read in broadcast Gap ACK blocks (bsc#1273523). * CVE-2026-64481: ALSA: hda/cs35l41: Fix firmware load work teardown (bsc#1274547). * CVE-2026-64541: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket (bsc#1273303). * CVE-2026-64543: tipc: fix use-after-free of the discoverer in tipc_disc_rcv() (bsc#1273311). * CVE-2026-64562: KVM: nVMX: Hide shadow VMCS right after VMCLEAR (bsc#1273930). * CVE-2026-64563: rhashtable: clear stale iter->p on table restart (bsc#1273995). * CVE-2026-64572: ipv4: fib: free fib_alias with kfree_rcu() on insert error path (bsc#1274014). * CVE-2026-64577: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() (bsc#1274031). * CVE-2026-64581: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() (bsc#1274041). * CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1274888). * CVE-2026-68136: net: gro: fix double aggregation of flush-marked skbs (bsc#1275474). * CVE-2026-68138: net/sched: serialize qdisc_rtab_list against concurrent get/put (bsc#1274941). * CVE-2026-68160: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() (bsc#1275472). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275161). * CVE-2026-68397: net/iucv: take a reference on the socket found in afiucv_hs_rcv() (bsc#1274898). * CVE-2026-68398: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF (bsc#1274908). * CVE-2026-68417: RDMA/siw: publish QP after initialization (bsc#1274696). * CVE-2026-68426: xfrm: fix stale skb->prev after async crypto steals a GSO segment (bsc#1274705). * CVE-2026-68480: x86/bugs: Make Safe-RET robust against interrupt injection (bsc#1274208). * CVE-2026-72020: ipvs: reset full ip_vs_seq structs in ip_vs_conn_new (bsc#1275506). * CVE-2026-72069: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (bsc#1275528). * CVE-2026-72072: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (bsc#1277155). * CVE-2026-72123: can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (bsc#1277523). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72251: netfilter: nf_nat_sip: reload possible stale data pointer (bsc#1275827). * CVE-2026-72262: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (bsc#1277678). * CVE-2026-72288: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (bsc#1275886). * CVE-2026-72289: KVM: arm64: vgic: Check the interrupt is still ours before migrating it (bsc#1275905). * CVE-2026-72389: bridge: stp: Fix a potential use-after-free when deleting a bridge (bsc#1273869). * CVE-2026-74345: RDMA/siw: Fix endpoint/socket association handling (bsc#1277285). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277408). * CVE-2026-74454: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO (bsc#1277073). * CVE-2026-74488: wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames (bsc#1276350). * CVE-2026-74496: fou: Fix use-after-free in fou_create() (bsc#1275867). * CVE-2026-74518: mm/hugetlb: fix list corruption in allocate_file_region_entries() (bsc#1275798). * CVE-2026-74537: Bluetooth: ISO: hold sk properly in iso_conn_ready (bsc#1275687). * CVE-2026-74581: net: ipv6: clear suppressed fib6 rule result (bsc#1275782). * CVE-2026-74582: packet: use consistent hard_header_len in non-ring send paths (bsc#1275784). * CVE-2026-74669: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (bsc#1277391). * CVE-2026-74695: netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() (bsc#1276931). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). The following non security issues were fixed: * mkspec-dtb: Move DTS prefix into package list. * mkspec-dtb: Move provides-obsoletes to package list. * mkspec-dtb: Put per-architecture package lists into a hash. * mkspec-dtb: re-indent. * net: mana: Add debug knob to skip TX timeout recovery reset (git-fixes). * net: mana: Add handler for sriov configure (bsc#1272756). * net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch (bsc#1269792). * net: mana: Route ring-buffer access through offset-based helpers (git- fixes). * net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() (git-fixes bsc#1274550). * PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip (git- fixes). * powerpc/pseries: lparcfg - fix kbuf[] underflow (bsc#1274753 ltc#221289 bsc#1274754 ltc#221288 bsc#1274752 ltc#221290). * RDMA/mana_ib: drain QP references after partial table insertion (git-fixes). * RDMA/mana_ib: unify QP lookup table (git-fixes). * RDMA/siw: Introduce siw_cep_set_free_and_put (git-fixes). * RDMA/siw: Introduce siw_destroy_cep_sock (git-fixes). * RDMA/siw: Introduce siw_free_cm_id (git-fixes). * RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp (git-fixes). * scsi: storvsc: Support manual scans for all Hyper-V targets (git-fixes). * smb/client: handle overlapping allocated ranges in fallocate (bsc#1274902). * smb: client: require net admin for CIFS SWN netlink (bsc#1273966). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4595 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4595 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4595 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4595 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4595 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4595 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4595 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.189.1 * kernel-livepatch-5_14_21-150500_55_189-default-1-150500.11.5.3 * kernel-default-livepatch-devel-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-livepatch-SLE15-SP5_Update_45-debugsource-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-debuginfo-1-150500.11.5.3 * kernel-default-debugsource-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-extra-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-optional-5.14.21-150500.55.189.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-extra-5.14.21-150500.55.189.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.189.1 * cluster-md-kmp-64kb-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 * kselftests-kmp-64kb-5.14.21-150500.55.189.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-64kb-5.14.21-150500.55.189.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-64kb-5.14.21-150500.55.189.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-64kb-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * dlm-kmp-64kb-5.14.21-150500.55.189.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * kselftests-kmp-default-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-qa-5.14.21-150500.55.189.1 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-extra-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * kernel-default-optional-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * kernel-default-livepatch-5.14.21-150500.55.189.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-kvmsmall-debugsource-5.14.21-150500.55.189.1 * kernel-default-base-rebuild-5.14.21-150500.55.189.1.150500.6.87.4 * kernel-kvmsmall-devel-5.14.21-150500.55.189.1 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_45-debugsource-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-1-150500.11.5.3 * kernel-livepatch-5_14_21-150500_55_189-default-debuginfo-1-150500.11.5.3 * kernel-default-livepatch-devel-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-5.14.21-150500.55.189.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.189.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.189.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (noarch) * kernel-source-vanilla-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * kernel-docs-html-5.14.21-150500.55.189.1 * kernel-source-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.189.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.189.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * kernel-obs-build-debugsource-5.14.21-150500.55.189.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-5.14.21-150500.55.189.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-5.14.21-150500.55.189.1 * kernel-syms-5.14.21-150500.55.189.1 * dlm-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debuginfo-5.14.21-150500.55.189.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.189.1 * gfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.189.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.189.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.189.1 * kernel-obs-build-5.14.21-150500.55.189.1 * ocfs2-kmp-default-5.14.21-150500.55.189.1 * cluster-md-kmp-default-5.14.21-150500.55.189.1 * kernel-default-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.189.1.150500.6.87.4 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-source-5.14.21-150500.55.189.1 * kernel-macros-5.14.21-150500.55.189.1 * kernel-devel-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.189.1 * kernel-zfcpdump-debugsource-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.189.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debuginfo-5.14.21-150500.55.189.1 * kernel-64kb-debugsource-5.14.21-150500.55.189.1 * kernel-64kb-devel-5.14.21-150500.55.189.1 ## References: * https://www.suse.com/security/cve/CVE-2024-57841.html * https://www.suse.com/security/cve/CVE-2026-23451.html * https://www.suse.com/security/cve/CVE-2026-31502.html * https://www.suse.com/security/cve/CVE-2026-43456.html * https://www.suse.com/security/cve/CVE-2026-45968.html * https://www.suse.com/security/cve/CVE-2026-52910.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-52929.html * https://www.suse.com/security/cve/CVE-2026-52977.html * https://www.suse.com/security/cve/CVE-2026-53059.html * https://www.suse.com/security/cve/CVE-2026-53163.html * https://www.suse.com/security/cve/CVE-2026-53260.html * https://www.suse.com/security/cve/CVE-2026-53264.html * https://www.suse.com/security/cve/CVE-2026-53381.html * https://www.suse.com/security/cve/CVE-2026-53388.html * https://www.suse.com/security/cve/CVE-2026-63801.html * https://www.suse.com/security/cve/CVE-2026-63823.html * https://www.suse.com/security/cve/CVE-2026-63827.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63992.html * https://www.suse.com/security/cve/CVE-2026-64002.html * https://www.suse.com/security/cve/CVE-2026-64007.html * https://www.suse.com/security/cve/CVE-2026-64010.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64015.html * https://www.suse.com/security/cve/CVE-2026-64047.html * https://www.suse.com/security/cve/CVE-2026-64048.html * https://www.suse.com/security/cve/CVE-2026-64098.html * https://www.suse.com/security/cve/CVE-2026-64109.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64115.html * https://www.suse.com/security/cve/CVE-2026-64137.html * https://www.suse.com/security/cve/CVE-2026-64266.html * https://www.suse.com/security/cve/CVE-2026-64268.html * https://www.suse.com/security/cve/CVE-2026-64304.html * https://www.suse.com/security/cve/CVE-2026-64355.html * https://www.suse.com/security/cve/CVE-2026-64423.html * https://www.suse.com/security/cve/CVE-2026-64450.html * https://www.suse.com/security/cve/CVE-2026-64481.html * https://www.suse.com/security/cve/CVE-2026-64541.html * https://www.suse.com/security/cve/CVE-2026-64543.html * https://www.suse.com/security/cve/CVE-2026-64562.html * https://www.suse.com/security/cve/CVE-2026-64563.html * https://www.suse.com/security/cve/CVE-2026-64572.html * https://www.suse.com/security/cve/CVE-2026-64577.html * https://www.suse.com/security/cve/CVE-2026-64581.html * https://www.suse.com/security/cve/CVE-2026-64593.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68136.html * https://www.suse.com/security/cve/CVE-2026-68138.html * https://www.suse.com/security/cve/CVE-2026-68160.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-68397.html * https://www.suse.com/security/cve/CVE-2026-68398.html * https://www.suse.com/security/cve/CVE-2026-68417.html * https://www.suse.com/security/cve/CVE-2026-68426.html * https://www.suse.com/security/cve/CVE-2026-68480.html * https://www.suse.com/security/cve/CVE-2026-72020.html * https://www.suse.com/security/cve/CVE-2026-72069.html * https://www.suse.com/security/cve/CVE-2026-72072.html * https://www.suse.com/security/cve/CVE-2026-72123.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72251.html * https://www.suse.com/security/cve/CVE-2026-72262.html * https://www.suse.com/security/cve/CVE-2026-72288.html * https://www.suse.com/security/cve/CVE-2026-72289.html * https://www.suse.com/security/cve/CVE-2026-72389.html * https://www.suse.com/security/cve/CVE-2026-74345.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74454.html * https://www.suse.com/security/cve/CVE-2026-74488.html * https://www.suse.com/security/cve/CVE-2026-74496.html * https://www.suse.com/security/cve/CVE-2026-74518.html * https://www.suse.com/security/cve/CVE-2026-74537.html * https://www.suse.com/security/cve/CVE-2026-74581.html * https://www.suse.com/security/cve/CVE-2026-74582.html * https://www.suse.com/security/cve/CVE-2026-74669.html * https://www.suse.com/security/cve/CVE-2026-74695.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://bugzilla.suse.com/show_bug.cgi?id=1235944 * https://bugzilla.suse.com/show_bug.cgi?id=1261604 * https://bugzilla.suse.com/show_bug.cgi?id=1263072 * https://bugzilla.suse.com/show_bug.cgi?id=1264734 * https://bugzilla.suse.com/show_bug.cgi?id=1267023 * https://bugzilla.suse.com/show_bug.cgi?id=1268659 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269004 * https://bugzilla.suse.com/show_bug.cgi?id=1269238 * https://bugzilla.suse.com/show_bug.cgi?id=1269242 * https://bugzilla.suse.com/show_bug.cgi?id=1269306 * https://bugzilla.suse.com/show_bug.cgi?id=1269655 * https://bugzilla.suse.com/show_bug.cgi?id=1269731 * https://bugzilla.suse.com/show_bug.cgi?id=1269792 * https://bugzilla.suse.com/show_bug.cgi?id=1271825 * https://bugzilla.suse.com/show_bug.cgi?id=1271830 * https://bugzilla.suse.com/show_bug.cgi?id=1272179 * https://bugzilla.suse.com/show_bug.cgi?id=1272182 * https://bugzilla.suse.com/show_bug.cgi?id=1272230 * https://bugzilla.suse.com/show_bug.cgi?id=1272385 * https://bugzilla.suse.com/show_bug.cgi?id=1272390 * https://bugzilla.suse.com/show_bug.cgi?id=1272756 * https://bugzilla.suse.com/show_bug.cgi?id=1272868 * https://bugzilla.suse.com/show_bug.cgi?id=1272877 * https://bugzilla.suse.com/show_bug.cgi?id=1273060 * https://bugzilla.suse.com/show_bug.cgi?id=1273105 * https://bugzilla.suse.com/show_bug.cgi?id=1273276 * https://bugzilla.suse.com/show_bug.cgi?id=1273303 * https://bugzilla.suse.com/show_bug.cgi?id=1273311 * https://bugzilla.suse.com/show_bug.cgi?id=1273422 * https://bugzilla.suse.com/show_bug.cgi?id=1273484 * https://bugzilla.suse.com/show_bug.cgi?id=1273488 * https://bugzilla.suse.com/show_bug.cgi?id=1273523 * https://bugzilla.suse.com/show_bug.cgi?id=1273555 * https://bugzilla.suse.com/show_bug.cgi?id=1273742 * https://bugzilla.suse.com/show_bug.cgi?id=1273745 * https://bugzilla.suse.com/show_bug.cgi?id=1273748 * https://bugzilla.suse.com/show_bug.cgi?id=1273762 * https://bugzilla.suse.com/show_bug.cgi?id=1273774 * https://bugzilla.suse.com/show_bug.cgi?id=1273869 * https://bugzilla.suse.com/show_bug.cgi?id=1273882 * https://bugzilla.suse.com/show_bug.cgi?id=1273891 * https://bugzilla.suse.com/show_bug.cgi?id=1273930 * https://bugzilla.suse.com/show_bug.cgi?id=1273944 * https://bugzilla.suse.com/show_bug.cgi?id=1273966 * https://bugzilla.suse.com/show_bug.cgi?id=1273995 * https://bugzilla.suse.com/show_bug.cgi?id=1274014 * https://bugzilla.suse.com/show_bug.cgi?id=1274031 * https://bugzilla.suse.com/show_bug.cgi?id=1274041 * https://bugzilla.suse.com/show_bug.cgi?id=1274208 * https://bugzilla.suse.com/show_bug.cgi?id=1274274 * https://bugzilla.suse.com/show_bug.cgi?id=1274497 * https://bugzilla.suse.com/show_bug.cgi?id=1274547 * https://bugzilla.suse.com/show_bug.cgi?id=1274550 * https://bugzilla.suse.com/show_bug.cgi?id=1274696 * https://bugzilla.suse.com/show_bug.cgi?id=1274705 * https://bugzilla.suse.com/show_bug.cgi?id=1274752 * https://bugzilla.suse.com/show_bug.cgi?id=1274753 * https://bugzilla.suse.com/show_bug.cgi?id=1274754 * https://bugzilla.suse.com/show_bug.cgi?id=1274859 * https://bugzilla.suse.com/show_bug.cgi?id=1274888 * https://bugzilla.suse.com/show_bug.cgi?id=1274898 * https://bugzilla.suse.com/show_bug.cgi?id=1274902 * https://bugzilla.suse.com/show_bug.cgi?id=1274908 * https://bugzilla.suse.com/show_bug.cgi?id=1274941 * https://bugzilla.suse.com/show_bug.cgi?id=1275161 * https://bugzilla.suse.com/show_bug.cgi?id=1275472 * https://bugzilla.suse.com/show_bug.cgi?id=1275474 * https://bugzilla.suse.com/show_bug.cgi?id=1275506 * https://bugzilla.suse.com/show_bug.cgi?id=1275528 * https://bugzilla.suse.com/show_bug.cgi?id=1275687 * https://bugzilla.suse.com/show_bug.cgi?id=1275782 * https://bugzilla.suse.com/show_bug.cgi?id=1275798 * https://bugzilla.suse.com/show_bug.cgi?id=1275827 * https://bugzilla.suse.com/show_bug.cgi?id=1275867 * https://bugzilla.suse.com/show_bug.cgi?id=1275886 * https://bugzilla.suse.com/show_bug.cgi?id=1275905 * https://bugzilla.suse.com/show_bug.cgi?id=1276350 * https://bugzilla.suse.com/show_bug.cgi?id=1276665 * https://bugzilla.suse.com/show_bug.cgi?id=1276931 * https://bugzilla.suse.com/show_bug.cgi?id=1277073 * https://bugzilla.suse.com/show_bug.cgi?id=1277155 * https://bugzilla.suse.com/show_bug.cgi?id=1277285 * https://bugzilla.suse.com/show_bug.cgi?id=1277391 * https://bugzilla.suse.com/show_bug.cgi?id=1277408 * https://bugzilla.suse.com/show_bug.cgi?id=1277523 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277678 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1279554 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:09 -0000 Subject: SUSE-SU-2026:4594-1: important: Security update for emacs Message-ID: <179149254972.3924.737139856069351980@35d72aa18c5b> # Security update for emacs Announcement ID: SUSE-SU-2026:4594-1 Release Date: 2026-10-08T14:24:33Z Rating: important References: * bsc#1282390 Cross-References: * CVE-2026-96442 CVSS scores: * CVE-2026-96442 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96442 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96442 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for emacs fixes the following issue: * CVE-2026-96442: arbitrary code execution when viewing or editing untrusted text files in modes other than Emacs Lisp mode due to incomplete fix for CVE (bsc#1282390). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4594 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4594 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4594 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4594 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4594 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4594 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4594 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4594 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4594 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4594 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4594 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4594 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4594 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * Basesystem Module 15-SP7 (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * emacs-nox-debuginfo-27.2-150400.3.34.1 * emacs-x11-debuginfo-27.2-150400.3.34.1 * emacs-nox-27.2-150400.3.34.1 * etags-debuginfo-27.2-150400.3.34.1 * emacs-x11-27.2-150400.3.34.1 * emacs-debugsource-27.2-150400.3.34.1 * etags-27.2-150400.3.34.1 * emacs-debuginfo-27.2-150400.3.34.1 * emacs-27.2-150400.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * emacs-el-27.2-150400.3.34.1 * emacs-info-27.2-150400.3.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96442.html * https://bugzilla.suse.com/show_bug.cgi?id=1282390 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:15 -0000 Subject: SUSE-SU-2026:4593-1: moderate: Security update for python-hpack Message-ID: <179149255535.3924.17663789810721144557@35d72aa18c5b> # Security update for python-hpack Announcement ID: SUSE-SU-2026:4593-1 Release Date: 2026-10-08T14:22:49Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4593 ## Package List: * Server Applications Module 15-SP7 (noarch) * python3-hpack-3.0.0-150200.3.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:20 -0000 Subject: SUSE-SU-2026:4592-1: moderate: Security update for GraphicsMagick Message-ID: <179149256086.3924.12527160093983957947@35d72aa18c5b> # Security update for GraphicsMagick Announcement ID: SUSE-SU-2026:4592-1 Release Date: 2026-10-08T14:22:18Z Rating: moderate References: * bsc#1283767 Cross-References: * CVE-2026-103118 CVSS scores: * CVE-2026-103118 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-103118 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-103118 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-103118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for GraphicsMagick fixes the following issue: * CVE-2026-103118: uncontrolled recursion in the WPG file handler when processing crafted WPG files which are self- referencing (bsc#1283767). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4592 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4592 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * GraphicsMagick-debugsource-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-1.3.42-150600.3.48.1 * GraphicsMagick-devel-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.48.1 * perl-GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick3-config-1.3.42-150600.3.48.1 * GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.48.1 * GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-1.3.42-150600.3.48.1 * perl-GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-1.3.42-150600.3.48.1 * libGraphicsMagick++-devel-1.3.42-150600.3.48.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * GraphicsMagick-debugsource-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-1.3.42-150600.3.48.1 * GraphicsMagick-devel-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-debuginfo-1.3.42-150600.3.48.1 * perl-GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick3-config-1.3.42-150600.3.48.1 * GraphicsMagick-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagick++-Q16-12-debuginfo-1.3.42-150600.3.48.1 * GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagick-Q16-3-1.3.42-150600.3.48.1 * perl-GraphicsMagick-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-debuginfo-1.3.42-150600.3.48.1 * libGraphicsMagickWand-Q16-2-1.3.42-150600.3.48.1 * libGraphicsMagick++-devel-1.3.42-150600.3.48.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103118.html * https://bugzilla.suse.com/show_bug.cgi?id=1283767 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:38 -0000 Subject: SUSE-SU-2026:4591-1: important: Security update for glibc Message-ID: <179149257869.3924.16097081217120872423@35d72aa18c5b> # Security update for glibc Announcement ID: SUSE-SU-2026:4591-1 Release Date: 2026-10-08T12:18:32Z Rating: important References: * bsc#1274723 * bsc#1274726 * bsc#1276946 * bsc#1277262 * bsc#1277921 * bsc#1277922 * bsc#1278011 * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-18374 * CVE-2026-19542 * CVE-2026-6368 * CVE-2026-6791 * CVE-2026-77117 * CVE-2026-80489 * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-18374 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-18374 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-18374 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19542 ( SUSE ): 1.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-19542 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L * CVE-2026-19542 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-6368 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6368 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:X/U:Green * CVE-2026-6791 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-6791 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77117 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77117 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80489 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80489 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities and has one security fix can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-6368: wordexp WRDE_APPEND rollback restores stale we_wordv, leading to invalid free in wordfree (bsc#1274726). * CVE-2026-6791: wordexp: unbounded alloca (strndupa) in parse_tilde (bsc#1274723). * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-18374: overflow in the fopen ccs extension (bsc#1277262). * CVE-2026-19542: Fix out-of-bounds array write in tdelete (bsc#1276946). * CVE-2026-77117: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277921). * CVE-2026-80489: non-progress DoS in SHIFT_JISX0213 -> UCS-4 conversion state handling (bsc#1277922). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4591 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4591 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4591 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4591 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4591 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4591 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4591 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4591 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4591 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4591 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4591 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4591 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4591 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4591 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 i686 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * openSUSE Leap 15.3 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-utils-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-profile-32bit-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * glibc-utils-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-static-32bit-2.31-150300.109.1 * openSUSE Leap 15.3 (aarch64_ilp32) * glibc-profile-64bit-2.31-150300.109.1 * glibc-devel-64bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-64bit-2.31-150300.109.1 * glibc-devel-64bit-2.31-150300.109.1 * glibc-devel-static-64bit-2.31-150300.109.1 * glibc-utils-64bit-debuginfo-2.31-150300.109.1 * glibc-64bit-debuginfo-2.31-150300.109.1 * glibc-utils-64bit-2.31-150300.109.1 * glibc-locale-base-64bit-debuginfo-2.31-150300.109.1 * glibc-64bit-2.31-150300.109.1 * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * openSUSE Leap 15.3 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-html-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-2.31-150300.109.1 * glibc-utils-debuginfo-2.31-150300.109.1 * glibc-extra-2.31-150300.109.1 * glibc-debugsource-2.31-150300.109.1 * glibc-extra-debuginfo-2.31-150300.109.1 * glibc-utils-src-debugsource-2.31-150300.109.1 * glibc-debuginfo-2.31-150300.109.1 * nscd-2.31-150300.109.1 * nscd-debuginfo-2.31-150300.109.1 * glibc-locale-base-debuginfo-2.31-150300.109.1 * glibc-devel-debuginfo-2.31-150300.109.1 * glibc-locale-base-2.31-150300.109.1 * glibc-profile-2.31-150300.109.1 * glibc-utils-2.31-150300.109.1 * glibc-devel-2.31-150300.109.1 * glibc-devel-static-2.31-150300.109.1 * glibc-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * glibc-devel-32bit-2.31-150300.109.1 * glibc-32bit-debuginfo-2.31-150300.109.1 * glibc-locale-base-32bit-2.31-150300.109.1 * glibc-locale-base-32bit-debuginfo-2.31-150300.109.1 * glibc-devel-32bit-debuginfo-2.31-150300.109.1 * glibc-32bit-2.31-150300.109.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * glibc-i18ndata-2.31-150300.109.1 * glibc-info-2.31-150300.109.1 * glibc-lang-2.31-150300.109.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18374.html * https://www.suse.com/security/cve/CVE-2026-19542.html * https://www.suse.com/security/cve/CVE-2026-6368.html * https://www.suse.com/security/cve/CVE-2026-6791.html * https://www.suse.com/security/cve/CVE-2026-77117.html * https://www.suse.com/security/cve/CVE-2026-80489.html * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1274723 * https://bugzilla.suse.com/show_bug.cgi?id=1274726 * https://bugzilla.suse.com/show_bug.cgi?id=1276946 * https://bugzilla.suse.com/show_bug.cgi?id=1277262 * https://bugzilla.suse.com/show_bug.cgi?id=1277921 * https://bugzilla.suse.com/show_bug.cgi?id=1277922 * https://bugzilla.suse.com/show_bug.cgi?id=1278011 * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:44 -0000 Subject: SUSE-SU-2026:4590-1: important: Security update for wpa_supplicant Message-ID: <179149258426.3924.10394621920776528989@35d72aa18c5b> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4590-1 Release Date: 2026-10-08T12:16:23Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4590 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4590 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4590 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4590 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4590 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4590 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * wpa_supplicant-gui-debuginfo-2.10-150500.3.9.1 * wpa_supplicant-gui-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.10-150500.3.9.1 * wpa_supplicant-2.10-150500.3.9.1 * wpa_supplicant-debuginfo-2.10-150500.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:49:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:49:55 -0000 Subject: SUSE-SU-2026:4589-1: important: Security update for php-composer2 Message-ID: <179149259552.3924.7706401770395642754@35d72aa18c5b> # Security update for php-composer2 Announcement ID: SUSE-SU-2026:4589-1 Release Date: 2026-10-08T12:15:39Z Rating: important References: * bsc#1271122 * bsc#1271123 * bsc#1271129 * bsc#1271130 * bsc#1271151 * bsc#1271152 Cross-References: * CVE-2026-59946 * CVE-2026-59947 * CVE-2026-59948 CVSS scores: * CVE-2026-59946 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59946 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-59946 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-59947 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-59947 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59947 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-59948 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-59948 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-59948 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities and has three security fixes can now be installed. ## Description: This update for php-composer2 fixes the following issues: * CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications (bsc#1271152). * CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token disclosure (bsc#1271130). * CVE-2026-59948: missing package name validation during dependency resolution in Composer can allow path traversal (bsc#1271123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4589 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4589 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4589 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4589 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4589 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4589 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4589 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4589 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4589 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * openSUSE Leap 15.4 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * php-composer2-2.2.30-150400.3.24.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * php-composer2-2.2.30-150400.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59946.html * https://www.suse.com/security/cve/CVE-2026-59947.html * https://www.suse.com/security/cve/CVE-2026-59948.html * https://bugzilla.suse.com/show_bug.cgi?id=1271122 * https://bugzilla.suse.com/show_bug.cgi?id=1271123 * https://bugzilla.suse.com/show_bug.cgi?id=1271129 * https://bugzilla.suse.com/show_bug.cgi?id=1271130 * https://bugzilla.suse.com/show_bug.cgi?id=1271151 * https://bugzilla.suse.com/show_bug.cgi?id=1271152 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 8 20:50:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 08 Oct 2026 20:50:01 -0000 Subject: SUSE-SU-2026:4588-1: important: Security update for wpa_supplicant Message-ID: <179149260119.3924.3807213602386715151@35d72aa18c5b> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:4588-1 Release Date: 2026-10-08T12:14:12Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4588 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.11-150700.3.6.1 * wpa_supplicant-debuginfo-2.11-150700.3.6.1 * wpa_supplicant-2.11-150700.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 12:30:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 12:30:08 -0000 Subject: SUSE-SU-2026:4598-1: important: Security update for ghostscript Message-ID: <179154900895.27557.8824694453886367237@35d72aa18c5b> # Security update for ghostscript Announcement ID: SUSE-SU-2026:4598-1 Release Date: 2026-10-08T22:03:41Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4598 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4598 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-23.100.1 * ghostscript-x11-debuginfo-9.52-23.100.1 * ghostscript-debuginfo-9.52-23.100.1 * ghostscript-x11-9.52-23.100.1 * ghostscript-9.52-23.100.1 * ghostscript-devel-9.52-23.100.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * ghostscript-debugsource-9.52-23.100.1 * ghostscript-x11-debuginfo-9.52-23.100.1 * ghostscript-debuginfo-9.52-23.100.1 * ghostscript-x11-9.52-23.100.1 * ghostscript-9.52-23.100.1 * ghostscript-devel-9.52-23.100.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 12:30:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 12:30:34 -0000 Subject: SUSE-SU-2026:4597-1: important: Security update for bind Message-ID: <179154903412.27557.11473420345618767352@35d72aa18c5b> # Security update for bind Announcement ID: SUSE-SU-2026:4597-1 Release Date: 2026-10-08T22:03:19Z Rating: important References: * bsc#1280433 * bsc#1280435 * bsc#1280443 Cross-References: * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-80274 CVSS scores: * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.0 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 An update that solves three vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 zypper in -t patch SUSE-MultiLinuxManagerTools-SLE-Micro-5-2026-4597 ## Package List: * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (aarch64 ppc64le s390x x86_64) * libisc1606-debuginfo-9.16.6-150000.12.94.1 * libbind9-1600-debuginfo-9.16.6-150000.12.94.1 * libisccc1600-debuginfo-9.16.6-150000.12.94.1 * libisccc1600-9.16.6-150000.12.94.1 * libns1604-debuginfo-9.16.6-150000.12.94.1 * libirs1601-9.16.6-150000.12.94.1 * bind-debuginfo-9.16.6-150000.12.94.1 * bind-debugsource-9.16.6-150000.12.94.1 * libisccfg1600-9.16.6-150000.12.94.1 * libns1604-9.16.6-150000.12.94.1 * libdns1605-debuginfo-9.16.6-150000.12.94.1 * libirs1601-debuginfo-9.16.6-150000.12.94.1 * bind-utils-debuginfo-9.16.6-150000.12.94.1 * libisccfg1600-debuginfo-9.16.6-150000.12.94.1 * libisc1606-9.16.6-150000.12.94.1 * libbind9-1600-9.16.6-150000.12.94.1 * libdns1605-9.16.6-150000.12.94.1 * bind-utils-9.16.6-150000.12.94.1 * SUSE Multi-Linux Manager Client Tools for SLE Micro 5 (noarch) * python3-bind-9.16.6-150000.12.94.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 16:30:07 -0000 Subject: SUSE-SU-2026:4605-1: important: Security update for fetchmail Message-ID: <179156340771.1649.3824012409589613116@929e079ff995> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4605-1 Release Date: 2026-10-09T10:00:35Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4605 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4605 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4605 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4605 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4605 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4605 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4605 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4605 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * fetchmailconf-6.4.22-150000.20.32.1 * fetchmail-debuginfo-6.4.22-150000.20.32.1 * fetchmail-debugsource-6.4.22-150000.20.32.1 * fetchmail-6.4.22-150000.20.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4604-1: important: Security update for fetchmail Message-ID: <179156341506.1649.14542931564477177893@929e079ff995> # Security update for fetchmail Announcement ID: SUSE-SU-2026:4604-1 Release Date: 2026-10-09T09:59:26Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4604 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4604 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4604 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4604 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4604 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmail-debugsource-6.4.22-150600.35.6.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * fetchmail-debugsource-6.4.22-150600.35.6.1 * fetchmail-6.4.22-150600.35.6.1 * fetchmail-debuginfo-6.4.22-150600.35.6.1 * fetchmailconf-6.4.22-150600.35.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 16:30:35 -0000 Subject: SUSE-SU-2026:4603-1: important: Security update for php8 Message-ID: <179156343525.1649.2015523788439758275@929e079ff995> # Security update for php8 Announcement ID: SUSE-SU-2026:4603-1 Release Date: 2026-10-09T09:58:46Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.2.34 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4603 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4603 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4603 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-ffi-debuginfo-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-ffi-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.34-150600.3.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php8-zip-8.2.34-150600.3.36.1 * php8-fastcgi-debuginfo-8.2.34-150600.3.36.1 * php8-zip-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-8.2.34-150600.3.36.1 * apache2-mod_php8-debugsource-8.2.34-150600.3.36.1 * php8-sodium-debuginfo-8.2.34-150600.3.36.1 * php8-debugsource-8.2.34-150600.3.36.1 * php8-fileinfo-debuginfo-8.2.34-150600.3.36.1 * php8-bcmath-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-8.2.34-150600.3.36.1 * php8-shmop-8.2.34-150600.3.36.1 * php8-soap-8.2.34-150600.3.36.1 * php8-sodium-8.2.34-150600.3.36.1 * php8-gd-debuginfo-8.2.34-150600.3.36.1 * php8-curl-debuginfo-8.2.34-150600.3.36.1 * php8-intl-8.2.34-150600.3.36.1 * php8-cli-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-8.2.34-150600.3.36.1 * php8-openssl-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-8.2.34-150600.3.36.1 * php8-fastcgi-8.2.34-150600.3.36.1 * php8-sysvsem-debuginfo-8.2.34-150600.3.36.1 * php8-ctype-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-debuginfo-8.2.34-150600.3.36.1 * php8-odbc-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-debuginfo-8.2.34-150600.3.36.1 * php8-debuginfo-8.2.34-150600.3.36.1 * php8-zlib-8.2.34-150600.3.36.1 * apache2-mod_php8-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-debuginfo-8.2.34-150600.3.36.1 * php8-soap-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-8.2.34-150600.3.36.1 * php8-readline-debuginfo-8.2.34-150600.3.36.1 * php8-xmlwriter-debuginfo-8.2.34-150600.3.36.1 * php8-devel-8.2.34-150600.3.36.1 * php8-fpm-debugsource-8.2.34-150600.3.36.1 * php8-readline-8.2.34-150600.3.36.1 * apache2-mod_php8-8.2.34-150600.3.36.1 * php8-dom-debuginfo-8.2.34-150600.3.36.1 * php8-fastcgi-debugsource-8.2.34-150600.3.36.1 * php8-sysvshm-8.2.34-150600.3.36.1 * php8-gd-8.2.34-150600.3.36.1 * php8-cli-8.2.34-150600.3.36.1 * php8-shmop-debuginfo-8.2.34-150600.3.36.1 * php8-curl-8.2.34-150600.3.36.1 * php8-fileinfo-8.2.34-150600.3.36.1 * php8-dom-8.2.34-150600.3.36.1 * php8-calendar-8.2.34-150600.3.36.1 * php8-opcache-8.2.34-150600.3.36.1 * php8-enchant-8.2.34-150600.3.36.1 * php8-dba-8.2.34-150600.3.36.1 * php8-sysvmsg-8.2.34-150600.3.36.1 * php8-phar-8.2.34-150600.3.36.1 * php8-gettext-debuginfo-8.2.34-150600.3.36.1 * php8-posix-8.2.34-150600.3.36.1 * php8-tokenizer-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-debuginfo-8.2.34-150600.3.36.1 * php8-exif-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debugsource-8.2.34-150600.3.36.1 * php8-phar-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-debuginfo-8.2.34-150600.3.36.1 * php8-embed-8.2.34-150600.3.36.1 * php8-dba-debuginfo-8.2.34-150600.3.36.1 * php8-ftp-8.2.34-150600.3.36.1 * php8-pgsql-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-debuginfo-8.2.34-150600.3.36.1 * php8-mysql-8.2.34-150600.3.36.1 * php8-ldap-debuginfo-8.2.34-150600.3.36.1 * php8-intl-debuginfo-8.2.34-150600.3.36.1 * php8-ldap-8.2.34-150600.3.36.1 * php8-ctype-8.2.34-150600.3.36.1 * php8-iconv-debuginfo-8.2.34-150600.3.36.1 * php8-xmlreader-8.2.34-150600.3.36.1 * php8-gettext-8.2.34-150600.3.36.1 * php8-tidy-debuginfo-8.2.34-150600.3.36.1 * php8-pcntl-8.2.34-150600.3.36.1 * php8-tidy-8.2.34-150600.3.36.1 * php8-gmp-debuginfo-8.2.34-150600.3.36.1 * php8-calendar-debuginfo-8.2.34-150600.3.36.1 * php8-sockets-debuginfo-8.2.34-150600.3.36.1 * php8-openssl-8.2.34-150600.3.36.1 * php8-test-8.2.34-150600.3.36.1 * php8-posix-debuginfo-8.2.34-150600.3.36.1 * php8-pdo-8.2.34-150600.3.36.1 * php8-8.2.34-150600.3.36.1 * php8-snmp-debuginfo-8.2.34-150600.3.36.1 * php8-fpm-8.2.34-150600.3.36.1 * php8-sysvshm-debuginfo-8.2.34-150600.3.36.1 * php8-sysvmsg-debuginfo-8.2.34-150600.3.36.1 * php8-embed-debuginfo-8.2.34-150600.3.36.1 * php8-xsl-8.2.34-150600.3.36.1 * php8-snmp-8.2.34-150600.3.36.1 * php8-tokenizer-8.2.34-150600.3.36.1 * php8-zlib-debuginfo-8.2.34-150600.3.36.1 * php8-sqlite-debuginfo-8.2.34-150600.3.36.1 * php8-bz2-debuginfo-8.2.34-150600.3.36.1 * php8-mbstring-8.2.34-150600.3.36.1 * php8-exif-8.2.34-150600.3.36.1 * php8-gmp-8.2.34-150600.3.36.1 * php8-pgsql-8.2.34-150600.3.36.1 * php8-sysvsem-8.2.34-150600.3.36.1 * php8-enchant-debuginfo-8.2.34-150600.3.36.1 * php8-iconv-8.2.34-150600.3.36.1 * php8-bcmath-8.2.34-150600.3.36.1 * php8-opcache-debuginfo-8.2.34-150600.3.36.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:30:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 16:30:51 -0000 Subject: SUSE-SU-2026:4602-1: important: Security update for php8 Message-ID: <179156345115.1649.1951564345188214253@929e079ff995> # Security update for php8 Announcement ID: SUSE-SU-2026:4602-1 Release Date: 2026-10-09T09:58:24Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.3.35 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4602 ## Package List: * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php8-phar-debuginfo-8.3.35-150700.3.21.1 * php8-shmop-8.3.35-150700.3.21.1 * php8-gd-8.3.35-150700.3.21.1 * apache2-mod_php8-8.3.35-150700.3.21.1 * php8-ctype-8.3.35-150700.3.21.1 * php8-dba-debuginfo-8.3.35-150700.3.21.1 * php8-pdo-debuginfo-8.3.35-150700.3.21.1 * php8-pcntl-debuginfo-8.3.35-150700.3.21.1 * php8-calendar-debuginfo-8.3.35-150700.3.21.1 * php8-tidy-debuginfo-8.3.35-150700.3.21.1 * php8-ctype-debuginfo-8.3.35-150700.3.21.1 * php8-xsl-8.3.35-150700.3.21.1 * php8-xmlreader-8.3.35-150700.3.21.1 * php8-openssl-8.3.35-150700.3.21.1 * php8-sodium-debuginfo-8.3.35-150700.3.21.1 * php8-pgsql-debuginfo-8.3.35-150700.3.21.1 * php8-gmp-debuginfo-8.3.35-150700.3.21.1 * php8-opcache-8.3.35-150700.3.21.1 * php8-debugsource-8.3.35-150700.3.21.1 * php8-intl-8.3.35-150700.3.21.1 * php8-fastcgi-debuginfo-8.3.35-150700.3.21.1 * php8-openssl-debuginfo-8.3.35-150700.3.21.1 * php8-gmp-8.3.35-150700.3.21.1 * php8-sysvsem-8.3.35-150700.3.21.1 * php8-zlib-debuginfo-8.3.35-150700.3.21.1 * php8-sockets-debuginfo-8.3.35-150700.3.21.1 * php8-sysvmsg-debuginfo-8.3.35-150700.3.21.1 * apache2-mod_php8-debugsource-8.3.35-150700.3.21.1 * php8-fastcgi-8.3.35-150700.3.21.1 * php8-zlib-8.3.35-150700.3.21.1 * php8-zip-debuginfo-8.3.35-150700.3.21.1 * php8-embed-debugsource-8.3.35-150700.3.21.1 * php8-embed-debuginfo-8.3.35-150700.3.21.1 * php8-dom-8.3.35-150700.3.21.1 * php8-sqlite-debuginfo-8.3.35-150700.3.21.1 * php8-sysvsem-debuginfo-8.3.35-150700.3.21.1 * php8-iconv-8.3.35-150700.3.21.1 * php8-8.3.35-150700.3.21.1 * php8-exif-debuginfo-8.3.35-150700.3.21.1 * php8-mysql-8.3.35-150700.3.21.1 * php8-fpm-debugsource-8.3.35-150700.3.21.1 * php8-soap-8.3.35-150700.3.21.1 * php8-enchant-debuginfo-8.3.35-150700.3.21.1 * php8-gettext-debuginfo-8.3.35-150700.3.21.1 * php8-xmlwriter-8.3.35-150700.3.21.1 * php8-enchant-8.3.35-150700.3.21.1 * php8-mbstring-debuginfo-8.3.35-150700.3.21.1 * php8-tokenizer-debuginfo-8.3.35-150700.3.21.1 * php8-readline-8.3.35-150700.3.21.1 * php8-gd-debuginfo-8.3.35-150700.3.21.1 * php8-exif-8.3.35-150700.3.21.1 * apache2-mod_php8-debuginfo-8.3.35-150700.3.21.1 * php8-snmp-8.3.35-150700.3.21.1 * php8-ldap-8.3.35-150700.3.21.1 * php8-dba-8.3.35-150700.3.21.1 * php8-pdo-8.3.35-150700.3.21.1 * php8-sysvmsg-8.3.35-150700.3.21.1 * php8-iconv-debuginfo-8.3.35-150700.3.21.1 * php8-ftp-debuginfo-8.3.35-150700.3.21.1 * php8-gettext-8.3.35-150700.3.21.1 * php8-phar-8.3.35-150700.3.21.1 * php8-sysvshm-8.3.35-150700.3.21.1 * php8-fileinfo-debuginfo-8.3.35-150700.3.21.1 * php8-sockets-8.3.35-150700.3.21.1 * php8-xsl-debuginfo-8.3.35-150700.3.21.1 * php8-posix-debuginfo-8.3.35-150700.3.21.1 * php8-dom-debuginfo-8.3.35-150700.3.21.1 * php8-bcmath-debuginfo-8.3.35-150700.3.21.1 * php8-test-8.3.35-150700.3.21.1 * php8-fpm-debuginfo-8.3.35-150700.3.21.1 * php8-curl-debuginfo-8.3.35-150700.3.21.1 * php8-ldap-debuginfo-8.3.35-150700.3.21.1 * php8-snmp-debuginfo-8.3.35-150700.3.21.1 * php8-sodium-8.3.35-150700.3.21.1 * php8-pcntl-8.3.35-150700.3.21.1 * php8-tidy-8.3.35-150700.3.21.1 * php8-intl-debuginfo-8.3.35-150700.3.21.1 * php8-pgsql-8.3.35-150700.3.21.1 * php8-soap-debuginfo-8.3.35-150700.3.21.1 * php8-ftp-8.3.35-150700.3.21.1 * php8-cli-debuginfo-8.3.35-150700.3.21.1 * php8-bz2-8.3.35-150700.3.21.1 * php8-zip-8.3.35-150700.3.21.1 * php8-bz2-debuginfo-8.3.35-150700.3.21.1 * php8-embed-8.3.35-150700.3.21.1 * php8-debuginfo-8.3.35-150700.3.21.1 * php8-sqlite-8.3.35-150700.3.21.1 * php8-mysql-debuginfo-8.3.35-150700.3.21.1 * php8-opcache-debuginfo-8.3.35-150700.3.21.1 * php8-cli-8.3.35-150700.3.21.1 * php8-fastcgi-debugsource-8.3.35-150700.3.21.1 * php8-curl-8.3.35-150700.3.21.1 * php8-bcmath-8.3.35-150700.3.21.1 * php8-odbc-debuginfo-8.3.35-150700.3.21.1 * php8-readline-debuginfo-8.3.35-150700.3.21.1 * php8-shmop-debuginfo-8.3.35-150700.3.21.1 * php8-fileinfo-8.3.35-150700.3.21.1 * php8-tokenizer-8.3.35-150700.3.21.1 * php8-calendar-8.3.35-150700.3.21.1 * php8-xmlreader-debuginfo-8.3.35-150700.3.21.1 * php8-fpm-8.3.35-150700.3.21.1 * php8-mbstring-8.3.35-150700.3.21.1 * php8-sysvshm-debuginfo-8.3.35-150700.3.21.1 * php8-odbc-8.3.35-150700.3.21.1 * php8-posix-8.3.35-150700.3.21.1 * php8-xmlwriter-debuginfo-8.3.35-150700.3.21.1 * php8-devel-8.3.35-150700.3.21.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 16:31:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 16:31:23 -0000 Subject: SUSE-SU-2026:4600-1: important: Security update for grafana, system-user-grafana Message-ID: <179156348368.1649.6143983098530911283@929e079ff995> # Security update for grafana, system-user-grafana Announcement ID: SUSE-SU-2026:4600-1 Release Date: 2026-10-09T08:54:31Z Rating: important References: * bsc#1262187 * bsc#1263330 * bsc#1265525 * bsc#1265763 * bsc#1268868 * bsc#1269841 * bsc#1271330 * bsc#1271557 * bsc#1272008 * bsc#1272328 * bsc#1272427 * bsc#1274217 * bsc#1275934 * bsc#1276426 * bsc#1276658 * bsc#1276973 * bsc#1277025 * bsc#1278307 * bsc#1278322 * jsc#MSQA-1060 Cross-References: * CVE-2026-1229 * CVE-2026-14199 * CVE-2026-17033 * CVE-2026-17183 * CVE-2026-19197 * CVE-2026-19475 * CVE-2026-21723 * CVE-2026-2303 * CVE-2026-33814 * CVE-2026-39882 * CVE-2026-41178 * CVE-2026-41606 * CVE-2026-42127 * CVE-2026-56852 * CVE-2026-73501 * CVE-2026-8595 * CVE-2026-8609 * CVE-2026-9029 CVSS scores: * CVE-2026-1229 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-1229 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L * CVE-2026-1229 ( NVD ): 2.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:X/RE:X/U:Amber * CVE-2026-1229 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-14199 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-14199 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-17033 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-17033 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17033 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-17183 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-17183 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-19197 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19197 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-19475 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19475 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-21723 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41606 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41606 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42127 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-73501 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-73501 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-8595 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-8595 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L * CVE-2026-8609 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-8609 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8609 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-9029 ( SUSE ): 4.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-9029 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-9029 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-9029 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 18 vulnerabilities, contains one feature and has one security fix can now be installed. ## Description: This update for grafana, system-user-grafana fixes the following issues: * Update to version 12.4.10: * Security: CVE-2026-17183: Fix exposing data accessible through Grafana's configured datasource credentials (bsc#1275934) CVE-2026-2303: Drop dependency on vulnerable go.mongodb.org/mongo-driver (bsc#1269841) CVE-2026-17033: Fix stored XSS via external Alertmanager generatorURL (bsc#1276426) CVE-2026-73501: Fix fail-open authentication bypass in github.com/getkin/kin-openapi (bsc#1276973) CVE-2026-19475: Fix DoS in PostgreSQL Datasource (bsc#1278307) CVE-2026-14199: Fix session takeover via Auth Proxy cache key collision (bsc#1278322) * Bug fixes: Dashboards: Fix adhoc and groupby variable datasource on UI import Dashboards: Fix version dates and user display names in the legacy version history page * Update to version 12.4.9: * Features and enhancements: Dashboard Import: Labels in v2 schema * Bug fixes: Azure Monitor: fix migration for dimension filters * Update to version 12.4.8: * Security: CVE-2026-19197: Fix access control in dashboard snapshots (bsc#1277025) * Update to version 12.4.7: * Security: CVE-2026-56852: Fix infinite loop on truncated/invalid UTF-8 input in golang.org/x/text/unicode/norm (bsc#1272008) * Features and enhancements: Dashboards: Get annotations and dashboard endpoint performance improvements * Bug fixes: DashboardDS: Fix Mixed panels with a time override stuck in permanent loading * Update to version 12.4.6: * Security: CVE-2026-41178: Fix opentelemetry-go's baggage parsing (bsc#1276658) * Features and enhancements: Alerting: Add protected fields authorization check to provisioning API Alerting: Return 403 instead of 500 on contact point provenance mismatch * Bug fixes: Jaeger: Handle gzip, deflate, and brotli compressed API responses Alerting: fix ORM table mapping bug causing SELECT alert_rule columns FROM user on PostgreSQL * Drop 0005-Bump-edwards25519.patch CVE-2026-39882: Prevent memory exhaustion DoS in OpenTelemetry OTLP HTTP exporters by updating to v1.43.0. (bsc#1274217) CVE-2026-8595: Fix stored XSS in the table panel (bsc#1271557) CVE-2026-42127: Fix DoS through memory exhaustion in grafana'a public dashboard query endpoint (bsc#1268868) CVE-2026-9029: Fix arbitrary code execution and information disclosure via XSS in geomap panel (bsc#1272328) CVE-2026-33814: Fix infinite loop in HTTP/2 transport by updating golang.org/x/net (bsc#1265763) CVE-2026-8609: Fix pre-authentication DoS in the OAuth login route (bsc#1271330) * CVE-2026-1229: Update github.com/cloudflare/circl to fix producing incorect output for specific inputs (bsc#1265525) (bsc#1262187) * CVE-2026-21723: Fix DoS vulnerability in Templates Test endpoint (bsc#1272427) \- CVE-2026-41606: Fix potential DoS in Apache Thrift (bsc#1263330) \- Build only for SUSE distributions ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4600 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * grafana-debuginfo-12.4.10-150200.3.94.3 * grafana-12.4.10-150200.3.94.3 * SUSE Package Hub 15 15-SP7 (noarch) * system-user-grafana-1.0.0-150200.5.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-1229.html * https://www.suse.com/security/cve/CVE-2026-14199.html * https://www.suse.com/security/cve/CVE-2026-17033.html * https://www.suse.com/security/cve/CVE-2026-17183.html * https://www.suse.com/security/cve/CVE-2026-19197.html * https://www.suse.com/security/cve/CVE-2026-19475.html * https://www.suse.com/security/cve/CVE-2026-21723.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41606.html * https://www.suse.com/security/cve/CVE-2026-42127.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-73501.html * https://www.suse.com/security/cve/CVE-2026-8595.html * https://www.suse.com/security/cve/CVE-2026-8609.html * https://www.suse.com/security/cve/CVE-2026-9029.html * https://bugzilla.suse.com/show_bug.cgi?id=1262187 * https://bugzilla.suse.com/show_bug.cgi?id=1263330 * https://bugzilla.suse.com/show_bug.cgi?id=1265525 * https://bugzilla.suse.com/show_bug.cgi?id=1265763 * https://bugzilla.suse.com/show_bug.cgi?id=1268868 * https://bugzilla.suse.com/show_bug.cgi?id=1269841 * https://bugzilla.suse.com/show_bug.cgi?id=1271330 * https://bugzilla.suse.com/show_bug.cgi?id=1271557 * https://bugzilla.suse.com/show_bug.cgi?id=1272008 * https://bugzilla.suse.com/show_bug.cgi?id=1272328 * https://bugzilla.suse.com/show_bug.cgi?id=1272427 * https://bugzilla.suse.com/show_bug.cgi?id=1274217 * https://bugzilla.suse.com/show_bug.cgi?id=1275934 * https://bugzilla.suse.com/show_bug.cgi?id=1276426 * https://bugzilla.suse.com/show_bug.cgi?id=1276658 * https://bugzilla.suse.com/show_bug.cgi?id=1276973 * https://bugzilla.suse.com/show_bug.cgi?id=1277025 * https://bugzilla.suse.com/show_bug.cgi?id=1278307 * https://bugzilla.suse.com/show_bug.cgi?id=1278322 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:30:17 -0000 Subject: SUSE-SU-2026:24115-1: important: Security update for qemu Message-ID: <179157781750.1793.14683767285167409942@00920b2f2f09> # Security update for qemu Announcement ID: SUSE-SU-2026:24115-1 Release Date: 2026-10-07T10:25:54Z Rating: important References: * bsc#1263864 * bsc#1279962 * bsc#1282077 * bsc#1282578 * bsc#1282918 Cross-References: * CVE-2026-81627 * CVE-2026-93834 CVSS scores: * CVE-2026-81627 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-81627 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-81627 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93834 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-93834 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has three fixes can now be installed. ## Description: This update for qemu fixes the following issues: Security issues fixed: * CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Management Mode memory (bsc#1282077). * CVE-2026-93834: hw/9pfs: mutate FID path from main thread only (bsc#1282578). Changes for qemu: * Bugfixes: * [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918) * virtio: fix queue size validation against allocated maximum (bsc#1279962) * virtio-mmio: fix QUEUE_NUM_MAX (bsc#1279962) * target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864) * target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864) * linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864) * linux-headers: Update to Linux v7.2-rc1 with KVM_S390_VM_CPU_FEAT_ASTFLEIE2 (bsc#1263864) * linux-headers: Update to Linux v7.1-rc4 (bsc#1263864) * scripts/update-linux-headers: Add typelimits.h (bsc#1263864) * update-linux-headers: Inject VIRTIO_RING_NO_LEGACY in virtio_ring.h (bsc#1263864) * linux-headers: Add nitro_enclaves.h (bsc#1263864) * scripts/update-linux-headers: Add Nitro Enclaves header (bsc#1263864) * standard-headers: Update virtio_spi.h from Linux v6.18-rc3 (bsc#1263864) * linux-headers: Update to Linux v6.19-rc1 (bsc#1263864) * update-linux-headers: Remove "asm-s390/unistd_32.h" (bsc#1263864) * linux-headers: Update to Linux v6.18-rc3 (bsc#1263864) * linux-headers/linux: Add mshv.h headers (bsc#1263864) * include/hw/hyperv: Add MSHV ABI header definitions (bsc#1263864) * linux-headers: Update to Linux v6.17-rc1 (bsc#1263864) * linux-headers: deal with counted_by annotation (bsc#1263864) * linux-headers: Remove the 32-bit arm headers (bsc#1263864) * update Linux headers to KVM tree master (bsc#1263864) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1860 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * qemu-guest-agent-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-chardev-spice-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-ui-opengl-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-audio-spice-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-ui-spice-core-debuginfo-10.0.13-160000.2.1 * qemu-audio-spice-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-chardev-spice-10.0.13-160000.2.1 * qemu-hw-display-qxl-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-ui-opengl-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-ui-spice-core-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-qxl-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (noarch) * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (aarch64) * qemu-arm-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (ppc64le) * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * SUSE Linux Micro 6.2 (s390x) * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81627.html * https://www.suse.com/security/cve/CVE-2026-93834.html * https://bugzilla.suse.com/show_bug.cgi?id=1263864 * https://bugzilla.suse.com/show_bug.cgi?id=1279962 * https://bugzilla.suse.com/show_bug.cgi?id=1282077 * https://bugzilla.suse.com/show_bug.cgi?id=1282578 * https://bugzilla.suse.com/show_bug.cgi?id=1282918 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:30:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:30:29 -0000 Subject: SUSE-SU-2026:24114-1: moderate: Security update for swtpm Message-ID: <179157782955.1793.1652894123181640506@00920b2f2f09> # Security update for swtpm Announcement ID: SUSE-SU-2026:24114-1 Release Date: 2026-10-07T09:31:01Z Rating: moderate References: * bsc#1221342 * bsc#1251789 * bsc#1266339 * bsc#1271417 * bsc#1275653 Cross-References: * CVE-2026-75900 CVSS scores: * CVE-2026-75900 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-75900 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for swtpm fixes the following issues: Security issue fixed: * CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for truncation following snprintf call * add upstream signing key and validate source signature * Fix SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched), create and listen on Unix stream sockets with swtpm_t processes (bsc#1266339). Already accepted on upstream: https://github.com/stefanberger/swtpm/pull/1132 * Drop tunable in require to avoid policy loading issues with toolchain 3.11 (bsc#1271417). Can be dropped, once this is accepted upstream: https://github.com/stefanberger/swtpm/pull/1139 * Update SELinux module dir as macro to allow root path move from /var/lib/selinux to /etc/selinux (bsc#1221342) * Also load swtpm_libvirt in the selinux subpackage (bsc#1251789) * Update to version 0.10.1: * swtpm: Fix build error on 32bit systems due to inconsistent _FILE_OFFSET_BITS. * swtpm_setup: * Use DISTRO_PROFILES_DIR when listing profiles (fix path issue). * Do not pass a TPM 2 profile to swtpm when reconfiguring. * selinux: * Add rule for swtpm to be able to read password from pipe. * allow to map state file. * add NFS permissions for swtpm_t. * Add rule to allow swtpm_t opening of virt_log_t files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1861 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Micro 6.2 (noarch) * swtpm-selinux-0.10.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-75900.html * https://bugzilla.suse.com/show_bug.cgi?id=1221342 * https://bugzilla.suse.com/show_bug.cgi?id=1251789 * https://bugzilla.suse.com/show_bug.cgi?id=1266339 * https://bugzilla.suse.com/show_bug.cgi?id=1271417 * https://bugzilla.suse.com/show_bug.cgi?id=1275653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:31:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:31:30 -0000 Subject: SUSE-SU-2026:24108-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179157789036.1793.10855170157715686929@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24108-1 Release Date: 2026-10-06T11:01:59Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1845 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:32:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:32:00 -0000 Subject: SUSE-SU-2026:24107-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179157792067.1793.4190724378949559654@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24107-1 Release Date: 2026-10-06T10:42:40Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1844 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:32:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:32:31 -0000 Subject: SUSE-SU-2026:24106-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179157795108.1793.5137929108088126767@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24106-1 Release Date: 2026-10-06T09:09:25Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1843 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:33:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:33:00 -0000 Subject: SUSE-SU-2026:24105-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179157798065.1793.16009152816267621069@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24105-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1842 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:33:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:33:29 -0000 Subject: SUSE-SU-2026:24104-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179157800937.1793.9858847107039890930@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24104-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1841 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:34:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:34:00 -0000 Subject: SUSE-SU-2026:24103-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179157804033.1793.10672224159349729460@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24103-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1840 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:34:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:34:30 -0000 Subject: SUSE-SU-2026:24102-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179157807038.1793.17251792115131233665@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24102-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1839 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:35:00 -0000 Subject: SUSE-SU-2026:24101-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179157810048.1793.5608618761935774376@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24101-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1838 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:35:29 -0000 Subject: SUSE-SU-2026:24100-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179157812970.1793.1929027314853290385@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24100-1 Release Date: 2026-10-05T21:37:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1837 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:35:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:35:59 -0000 Subject: SUSE-SU-2026:24099-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179157815984.1793.15099966104675844838@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24099-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1836 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:36:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:36:35 -0000 Subject: SUSE-SU-2026:24098-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179157819548.1793.12270813523443846945@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24098-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1835 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:37:04 -0000 Subject: SUSE-SU-2026:24097-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179157822465.1793.15888982064293276427@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24097-1 Release Date: 2026-10-05T19:09:29Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1834 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:37:10 -0000 Subject: SUSE-SU-2026:24096-1: important: Security update for wpa_supplicant Message-ID: <179157823063.1793.18396855701955728845@00920b2f2f09> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24096-1 Release Date: 2026-10-05T18:13:18Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: Security issues fixed: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1833 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debugsource-2.11-160000.5.1 * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:37:41 -0000 Subject: SUSE-SU-2026:24095-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179157826146.1793.4700633899539148462@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24095-1 Release Date: 2026-10-05T17:08:09Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1832 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:37:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:37:59 -0000 Subject: SUSE-SU-2026:24094-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179157827913.1793.7501071770534656663@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24094-1 Release Date: 2026-10-05T15:56:29Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1831 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:38:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:38:29 -0000 Subject: SUSE-SU-2026:24093-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179157830900.1793.7619666179865527723@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24093-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1830 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:38:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:38:58 -0000 Subject: SUSE-SU-2026:24092-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179157833812.1793.17278865123032976876@00920b2f2f09> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24092-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1829 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:39:06 -0000 Subject: SUSE-SU-2026:4612-1: important: Security update for perl-DBI Message-ID: <179157834608.1793.10173134313304906466@00920b2f2f09> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4612-1 Release Date: 2026-10-09T15:56:46Z Rating: important References: * bsc#1281704 * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-78030 * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-78030 ( SUSE ): 8.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78030 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78030 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-78030: arbitrary modules loaded due to unvalidated `dbm_type` and `dbm_mldbm` attributes in `DBD::DBM` (bsc#1281704). * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4612 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4612 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4612 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4612 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4612 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4612 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4612 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4612 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * perl-DBI-debugsource-1.642-150200.3.26.1 * perl-DBI-1.642-150200.3.26.1 * perl-DBI-debuginfo-1.642-150200.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78030.html * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1281704 * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:39:19 -0000 Subject: SUSE-SU-2026:4611-1: important: Security update for rsyslog Message-ID: <179157835941.1793.14416921513036114330@00920b2f2f09> # Security update for rsyslog Announcement ID: SUSE-SU-2026:4611-1 Release Date: 2026-10-09T15:55:48Z Rating: important References: * bsc#1257604 * bsc#1271910 * bsc#1272414 * bsc#1274610 * bsc#1275926 * bsc#1281628 Cross-References: * CVE-2026-19654 * CVE-2026-61548 * CVE-2026-78002 CVSS scores: * CVE-2026-19654 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19654 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19654 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-61548 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-61548 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78002 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78002 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Galera for Ericsson 15 SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves three vulnerabilities and has three security fixes can now be installed. ## Description: This update for rsyslog fixes the following issues: * imdtls permitted-peer authorization bypass (bsc#1281628). Changes for rsyslog: * Upgrade to version 8.2608.0 (bsc#1257604) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4611 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4611 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4611 * Galera for Ericsson 15 SP7 zypper in -t patch SUSE-SLE-Product-SLES-15-SP7-ERICSSON-2026-4611 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-ossl-8.2608.0-150700.3.24.1 * rsyslog-8.2608.0-150700.3.24.1 * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-ossl-debuginfo-8.2608.0-150700.3.24.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-module-gssapi-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-udpspoof-8.2608.0-150700.3.24.1 * rsyslog-module-mmnormalize-8.2608.0-150700.3.24.1 * rsyslog-module-gtls-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-snmp-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-gssapi-8.2608.0-150700.3.24.1 * rsyslog-module-pgsql-8.2608.0-150700.3.24.1 * rsyslog-module-relp-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-relp-8.2608.0-150700.3.24.1 * rsyslog-module-snmp-8.2608.0-150700.3.24.1 * rsyslog-module-gtls-8.2608.0-150700.3.24.1 * rsyslog-module-mysql-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-mmnormalize-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-pgsql-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-module-mysql-8.2608.0-150700.3.24.1 * rsyslog-module-udpspoof-debuginfo-8.2608.0-150700.3.24.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * rsyslog-debuginfo-8.2608.0-150700.3.24.1 * rsyslog-debugsource-8.2608.0-150700.3.24.1 * rsyslog-module-kafka-8.2608.0-150700.3.24.1 * rsyslog-module-kafka-debuginfo-8.2608.0-150700.3.24.1 * Galera for Ericsson 15 SP7 (x86_64) * rsyslog-devel-8.2608.0-150700.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19654.html * https://www.suse.com/security/cve/CVE-2026-61548.html * https://www.suse.com/security/cve/CVE-2026-78002.html * https://bugzilla.suse.com/show_bug.cgi?id=1257604 * https://bugzilla.suse.com/show_bug.cgi?id=1271910 * https://bugzilla.suse.com/show_bug.cgi?id=1272414 * https://bugzilla.suse.com/show_bug.cgi?id=1274610 * https://bugzilla.suse.com/show_bug.cgi?id=1275926 * https://bugzilla.suse.com/show_bug.cgi?id=1281628 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:39:35 -0000 Subject: SUSE-SU-2026:4610-1: important: Security update for flatpak Message-ID: <179157837553.1793.4750943594222676372@00920b2f2f09> # Security update for flatpak Announcement ID: SUSE-SU-2026:4610-1 Release Date: 2026-10-09T15:55:06Z Rating: important References: * bsc#1280236 * bsc#1282514 * bsc#1282515 * bsc#1282516 * bsc#1282519 * bsc#1282520 * bsc#1282521 * bsc#1282523 * bsc#1282524 Cross-References: * CVE-2026-90616 * CVE-2026-92162 * CVE-2026-96275 * CVE-2026-96276 * CVE-2026-96281 * CVE-2026-96282 * CVE-2026-96283 * CVE-2026-96807 * CVE-2026-96808 CVSS scores: * CVE-2026-90616 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-90616 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90616 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92162 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-92162 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-96275 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96275 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96275 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96276 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-96276 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96281 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-96281 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-96281 ( NVD ): 6.2 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:N * CVE-2026-96282 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N * CVE-2026-96282 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-96283 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96283 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96283 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96807 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:L * CVE-2026-96807 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L * CVE-2026-96807 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-96808 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96808 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96808 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236). * CVE-2026-92162: path traversal via unvalidated `arch` parameter in `DeployAppstream` (bsc#1282514). * CVE-2026-96275: arbitrary write access as root via extra-data extraction (bsc#1282515). * CVE-2026-96276: arbitrary write in host context via `flatpak build-init` (bsc#1282516). * CVE-2026-96281: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes (bsc#1282519). * CVE-2026-96282: extension metadata path traversal file existence oracle (bsc#1282520). * CVE-2026-96283: flatpak-system-helper: cross-user `CancelPull` orphans another user's ongoing pull (bsc#1282521). * CVE-2026-96807: fixed-filename writes to arbitrary locations via symlink attack on `.ld.so` (bsc#1282523). * CVE-2026-96808: `revokefs` symlink path traversal allows local privilege escalation via commit tampering (bsc#1282524). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4610 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4610 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * flatpak-debugsource-1.4.2-3.15.1 * libflatpak0-1.4.2-3.15.1 * flatpak-1.4.2-3.15.1 * typelib-1_0-Flatpak-1_0-1.4.2-3.15.1 * flatpak-debuginfo-1.4.2-3.15.1 * libflatpak0-debuginfo-1.4.2-3.15.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * flatpak-debugsource-1.4.2-3.15.1 * libflatpak0-1.4.2-3.15.1 * flatpak-1.4.2-3.15.1 * typelib-1_0-Flatpak-1_0-1.4.2-3.15.1 * flatpak-debuginfo-1.4.2-3.15.1 * libflatpak0-debuginfo-1.4.2-3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-90616.html * https://www.suse.com/security/cve/CVE-2026-92162.html * https://www.suse.com/security/cve/CVE-2026-96275.html * https://www.suse.com/security/cve/CVE-2026-96276.html * https://www.suse.com/security/cve/CVE-2026-96281.html * https://www.suse.com/security/cve/CVE-2026-96282.html * https://www.suse.com/security/cve/CVE-2026-96283.html * https://www.suse.com/security/cve/CVE-2026-96807.html * https://www.suse.com/security/cve/CVE-2026-96808.html * https://bugzilla.suse.com/show_bug.cgi?id=1280236 * https://bugzilla.suse.com/show_bug.cgi?id=1282514 * https://bugzilla.suse.com/show_bug.cgi?id=1282515 * https://bugzilla.suse.com/show_bug.cgi?id=1282516 * https://bugzilla.suse.com/show_bug.cgi?id=1282519 * https://bugzilla.suse.com/show_bug.cgi?id=1282520 * https://bugzilla.suse.com/show_bug.cgi?id=1282521 * https://bugzilla.suse.com/show_bug.cgi?id=1282523 * https://bugzilla.suse.com/show_bug.cgi?id=1282524 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:39:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:39:53 -0000 Subject: SUSE-SU-2026:4608-1: important: Security update for bind Message-ID: <179157839309.1793.7454908334119180826@00920b2f2f09> # Security update for bind Announcement ID: SUSE-SU-2026:4608-1 Release Date: 2026-10-09T15:54:45Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280437 * bsc#1280438 * bsc#1280442 * bsc#1280443 * bsc#1280444 * bsc#1280445 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-78301 * CVE-2026-80274 * CVE-2026-81563 * CVE-2026-81736 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81563 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81736 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). * CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444). * CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4608 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4608 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4608 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * bind-doc-9.18.50-150600.3.35.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * openSUSE Leap 15.6 (noarch) * bind-doc-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * bind-9.18.50-150600.3.35.1 * bind-utils-debuginfo-9.18.50-150600.3.35.1 * bind-debugsource-9.18.50-150600.3.35.1 * bind-debuginfo-9.18.50-150600.3.35.1 * bind-utils-9.18.50-150600.3.35.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * bind-doc-9.18.50-150600.3.35.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://www.suse.com/security/cve/CVE-2026-81563.html * https://www.suse.com/security/cve/CVE-2026-81736.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 * https://bugzilla.suse.com/show_bug.cgi?id=1280444 * https://bugzilla.suse.com/show_bug.cgi?id=1280445 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 9 20:40:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 09 Oct 2026 20:40:13 -0000 Subject: SUSE-SU-2026:4606-1: important: Security update for golang-github-prometheus-prometheus Message-ID: <179157841318.1793.9985199045717351917@00920b2f2f09> # Security update for golang-github-prometheus-prometheus Announcement ID: SUSE-SU-2026:4606-1 Release Date: 2026-10-09T12:30:05Z Rating: important References: * bsc#1266608 * bsc#1267528 * bsc#1267534 * bsc#1267538 * bsc#1269856 * bsc#1269966 * bsc#1270711 * bsc#1272102 * bsc#1274221 * bsc#1275205 * bsc#1275206 * bsc#1275207 * jsc#MSQA-1060 * jsc#PED-16707 Cross-References: * CVE-2023-45289 * CVE-2025-4673 * CVE-2025-61686 * CVE-2026-2303 * CVE-2026-39821 * CVE-2026-40181 * CVE-2026-42211 * CVE-2026-42342 * CVE-2026-44990 * CVE-2026-53606 * CVE-2026-56852 CVSS scores: * CVE-2023-45289 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-45289 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2025-4673 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-4673 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-4673 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-61686 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2025-61686 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-40181 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-40181 ( NVD ): 6.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40181 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-42211 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-42211 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42342 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-42342 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-44990 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-44990 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-44990 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-44990 ( NVD ): 9.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N * CVE-2026-53606 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-53606 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 11 vulnerabilities, contains two features and has one security fix can now be installed. ## Description: This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus was updated to version 3.13.2: * Security issues: * CVE-2026-39821: Fixed validation bypass and privilege escalation in Punycode label handling (bsc#1266608) * CVE-2026-56852: Fixed infinite loop on truncated or invalid UTF-8 input in unicode/norm handling (bsc#1272102) * CVE-2026-44990: Fixed stored XSS in the new React UI by sanitizing disallowed xmp elements (bsc#1275205) * CVE-2026-53606: Fixed incomplete URI scheme validation in sanitize-html that could enable XSS (bsc#1269966) * CVE-2026-2303: Fixed heap out-of-bounds read in GSSAPI error handling in mongo-driver (bsc#1269856) * CVE-2025-4673: Fixed credential leaks by stopping HTTP client header forwarding on redirects (bsc#1275206) * CVE-2023-45289: Fixed credential leaks by stopping header and cookie forwarding on HTTP redirects (bsc#1275207) * CVE-2025-61686: Fixed unauthorized file access and path traversal in react- router storage (bsc#1270711) * CVE-2026-40181: Fixed open redirect risks to external domains via relative paths in react-router (bsc#1267528) * CVE-2026-42342: Fixed DoS risks via unbounded path expansion in the manifest endpoint (bsc#1267538) * CVE-2026-42211: Fixed remote code execution risks from prototype pollution in react-router (bsc#1267534) * CVE-2026-39882: Fixed memory exhaustion via uncapped HTTP response reading in OpenTelemetry (bsc#1274221) * Fixed potential denial-of-service vulnerabilities by updating the gRPC dependency * Fixed memory exhaustion and DoS by rejecting snappy-compressed requests exceeding 32MB limit * Bug fixes and changes: * Fixed scrape manager failing to reload properly when SD configuration changes rapidly. * Prevent memory leak in remote-write path when the receiving endpoint is unavailable. * Native Histograms are no longer experimental. They are fully supported for production workloads. * Added support for OpenTelemetry traces within the Prometheus UI to correlate metrics and traces. * TSDB compaction speed optimized by improving the block merging algorithm. * Allow scraping of multiple targets using a single HTTP/2 connection to reduce overhead. * Added new metrics to monitor the health of the rule evaluation engine. * Incompatible: This affects scraping, remote read and write, alerting, and SD. Network paths might need adjustments to avoid redirects. * Incompatible: Rule group pagination tokens now use SHA-256 instead of MD5. Custom API consumers must adapt to the new longer token format. * Added 'group_limit' parameter to PromQL aggregations to restrict the number of results. * Incompatible: promtool relative paths in config files now resolve relative to the config directory itself, instead of the current working directory. * Support exporting TSDB blocks directly to cloud storage via the admin API. * Incompatible: Deprecated remote-write metrics like prometheus_remote_storage_samples_total are removed in favor of prometheus_wal_watcher_records_read_total. * Significant query performance boost for high-cardinality regex matchers. * Introduce a new UI interface for safely deleting specific time series data directly. * Added dynamic relabeling actions to extract substrings using regex capture groups. * Fixed UI displaying incorrect time ranges after a timezone change. * Bumped firewalld-prometheus-config to version 0.2 bumping OpenTelemetry to 1.43.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4606 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * golang-github-prometheus-prometheus-debuginfo-3.13.2-150100.4.40.2 * golang-github-prometheus-prometheus-3.13.2-150100.4.40.2 ## References: * https://www.suse.com/security/cve/CVE-2023-45289.html * https://www.suse.com/security/cve/CVE-2025-4673.html * https://www.suse.com/security/cve/CVE-2025-61686.html * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-40181.html * https://www.suse.com/security/cve/CVE-2026-42211.html * https://www.suse.com/security/cve/CVE-2026-42342.html * https://www.suse.com/security/cve/CVE-2026-44990.html * https://www.suse.com/security/cve/CVE-2026-53606.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://bugzilla.suse.com/show_bug.cgi?id=1266608 * https://bugzilla.suse.com/show_bug.cgi?id=1267528 * https://bugzilla.suse.com/show_bug.cgi?id=1267534 * https://bugzilla.suse.com/show_bug.cgi?id=1267538 * https://bugzilla.suse.com/show_bug.cgi?id=1269856 * https://bugzilla.suse.com/show_bug.cgi?id=1269966 * https://bugzilla.suse.com/show_bug.cgi?id=1270711 * https://bugzilla.suse.com/show_bug.cgi?id=1272102 * https://bugzilla.suse.com/show_bug.cgi?id=1274221 * https://bugzilla.suse.com/show_bug.cgi?id=1275205 * https://bugzilla.suse.com/show_bug.cgi?id=1275206 * https://bugzilla.suse.com/show_bug.cgi?id=1275207 * https://jira.suse.com/browse/MSQA-1060 * https://jira.suse.com/browse/PED-16707 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:30:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:30:28 -0000 Subject: SUSE-SU-2026:4624-1: important: Security update for unbound Message-ID: <179180822805.16296.1404352697694137535@81803ed3a673> # Security update for unbound Announcement ID: SUSE-SU-2026:4624-1 Release Date: 2026-10-12T07:29:20Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for libunbound-devel-mini: * Updated to version 1.26.1 Changes for unbound: * Updated to version 1.26.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4624 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4624 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4624 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4624 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4624 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4624 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4624 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4624 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4624 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-150100.10.31.1 * unbound-anchor-debuginfo-1.26.1-150100.10.31.1 * unbound-anchor-1.26.1-150100.10.31.1 * unbound-debuginfo-1.26.1-150100.10.31.1 * unbound-devel-1.26.1-150100.10.31.1 * libunbound8-1.26.1-150100.10.31.1 * libunbound8-debuginfo-1.26.1-150100.10.31.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:30:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:30:57 -0000 Subject: SUSE-SU-2026:4623-1: important: Security update for expat Message-ID: <179180825771.16296.9642283412862279848@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4623-1 Release Date: 2026-10-12T07:27:51Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4623 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4623 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4623 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4623 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4623 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4623 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4623 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4623 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4623 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4623 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4623 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4623 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4623 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4623 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (x86_64) * libexpat-devel-32bit-2.8.5-150400.3.40.1 * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * expat-64bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-64bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-64bit-2.8.5-150400.3.40.1 * libexpat-devel-64bit-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libexpat1-debuginfo-2.8.5-150400.3.40.1 * expat-debuginfo-2.8.5-150400.3.40.1 * expat-2.8.5-150400.3.40.1 * libexpat1-2.8.5-150400.3.40.1 * expat-debugsource-2.8.5-150400.3.40.1 * libexpat-devel-2.8.5-150400.3.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * expat-32bit-debuginfo-2.8.5-150400.3.40.1 * libexpat1-32bit-2.8.5-150400.3.40.1 * libexpat1-32bit-debuginfo-2.8.5-150400.3.40.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:31:14 -0000 Subject: SUSE-SU-2026:4622-1: important: Security update for apache-sshd Message-ID: <179180827424.16296.10577305988157308900@81803ed3a673> # Security update for apache-sshd Announcement ID: SUSE-SU-2026:4622-1 Release Date: 2026-10-12T07:25:51Z Rating: important References: * bsc#1283344 * bsc#1283345 * bsc#1283346 * bsc#1283347 * bsc#1283348 * bsc#1283350 * bsc#1283352 * bsc#1283357 Cross-References: * CVE-2026-77185 * CVE-2026-93994 * CVE-2026-93995 * CVE-2026-93996 * CVE-2026-94002 * CVE-2026-94029 * CVE-2026-94052 * CVE-2026-94053 CVSS scores: * CVE-2026-77185 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-77185 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93994 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93994 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93995 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93995 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-93996 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93996 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94002 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94002 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94029 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94029 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94052 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-94052 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-94053 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94053 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities can now be installed. ## Description: This update for apache-sshd fixes the following issues: * CVE-2026-77185: Asynchronous authentication can bypass signature verification (bsc#1283357). * CVE-2026-93994: Repeated-publickey policy bypass on server (bsc#1283352). * CVE-2026-93995: Remote execution of JGit "archive -o=file.zip" can write file on the server (bsc#1283350). * CVE-2026-93996: Memory exhaustion DoS via unbounded SCP command line read (bsc#1283348). * CVE-2026-94002: Memory exhaustion in SFTP client via unsolicited SFTP replies (bsc#1283347). * CVE-2026-94029: Memory exhaustion in SFTP v6 check-file-name/check-file- handle extension (bsc#1283346). * CVE-2026-94052: LDAP password authentication ineffective (bsc#1283345). * CVE-2026-94053: LDAP injection in sshd-ldap (bsc#1283344). Changes for apache-sshd: * Update to upstream version 2.20.0: * GH-656 ChannelPipedInputStream: shrink buffer when emptied * GH-906 Fix finding a signature factory for BC ed25519 keys * GH-911 Fix server-side SOCKS5 proxy for fragmented and pipelined CONNECT requests * Allow asynchronous authentication only for password and keyboard-interactive authentication schemes * Fix authentication requiring multiple public keys (server-side) * Better argument handling in sshd-git * More checks in authentication (server-side) * Better SCP command handling * SFTP client: simplify response message handling * Fix check-file-name/check-file-handle SFTP v6 extension * Improve LDAP authentication (sshd-ldap) * New Features * GH-905 Implement the "from" and "expiry-time" options in authorized_keys handling in public key authentication (server side) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4622 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4622 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4622 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4622 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4622 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4622 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4622 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4622 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4622 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4622 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4622 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 * Development Tools Module 15-SP7 (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * apache-sshd-2.20.0-150200.5.19.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77185.html * https://www.suse.com/security/cve/CVE-2026-93994.html * https://www.suse.com/security/cve/CVE-2026-93995.html * https://www.suse.com/security/cve/CVE-2026-93996.html * https://www.suse.com/security/cve/CVE-2026-94002.html * https://www.suse.com/security/cve/CVE-2026-94029.html * https://www.suse.com/security/cve/CVE-2026-94052.html * https://www.suse.com/security/cve/CVE-2026-94053.html * https://bugzilla.suse.com/show_bug.cgi?id=1283344 * https://bugzilla.suse.com/show_bug.cgi?id=1283345 * https://bugzilla.suse.com/show_bug.cgi?id=1283346 * https://bugzilla.suse.com/show_bug.cgi?id=1283347 * https://bugzilla.suse.com/show_bug.cgi?id=1283348 * https://bugzilla.suse.com/show_bug.cgi?id=1283350 * https://bugzilla.suse.com/show_bug.cgi?id=1283352 * https://bugzilla.suse.com/show_bug.cgi?id=1283357 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:31:26 -0000 Subject: SUSE-SU-2026:4621-1: important: Security update for squid Message-ID: <179180828681.16296.17519265411260325426@81803ed3a673> # Security update for squid Announcement ID: SUSE-SU-2026:4621-1 Release Date: 2026-10-12T07:24:07Z Rating: important References: * bsc#1237027 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities and has one security fix can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). Changes for squid: * Do not leak HttpReply when checking http_reply_access (bsc#1237027) * Updated to version 6.14 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4621 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4621 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4621 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4621 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * squid-debugsource-6.14-150600.3.20.1 * squid-debuginfo-6.14-150600.3.20.1 * squid-6.14-150600.3.20.1 ## References: * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1237027 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:31:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:31:44 -0000 Subject: SUSE-SU-2026:4620-1: important: Security update for unbound Message-ID: <179180830445.16296.17654707922626579154@81803ed3a673> # Security update for unbound Announcement ID: SUSE-SU-2026:4620-1 Release Date: 2026-10-12T07:23:37Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for libunbound-devel-mini: * Updated to version 1.26.1 Changes for unbound: * Updated to version 1.26.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4620 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4620 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4620 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4620 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4620 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-debugsource-1.26.1-150600.23.24.1 * unbound-python-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * unbound-python-debuginfo-1.26.1-150600.23.24.1 * libunbound-devel-mini-debuginfo-1.26.1-150600.23.24.1 * openSUSE Leap 15.6 (noarch) * unbound-munin-1.26.1-150600.23.24.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-1.26.1-150600.23.24.1 * unbound-python-1.26.1-150600.23.24.1 * unbound-python-debuginfo-1.26.1-150600.23.24.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * unbound-anchor-debuginfo-1.26.1-150600.23.24.1 * unbound-debuginfo-1.26.1-150600.23.24.1 * unbound-debugsource-1.26.1-150600.23.24.1 * unbound-anchor-1.26.1-150600.23.24.1 * unbound-devel-1.26.1-150600.23.24.1 * libunbound8-debuginfo-1.26.1-150600.23.24.1 * libunbound8-1.26.1-150600.23.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:32:14 -0000 Subject: SUSE-SU-2026:4619-1: important: Security update for expat Message-ID: <179180833441.16296.4721877906010021077@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4619-1 Release Date: 2026-10-12T07:22:46Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4619 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * expat-debuginfo-2.8.5-150700.3.15.1 * libexpat1-2.8.5-150700.3.15.1 * expat-debugsource-2.8.5-150700.3.15.1 * libexpat-devel-2.8.5-150700.3.15.1 * expat-2.8.5-150700.3.15.1 * libexpat1-debuginfo-2.8.5-150700.3.15.1 * Basesystem Module 15-SP7 (x86_64) * expat-32bit-debuginfo-2.8.5-150700.3.15.1 * libexpat1-32bit-debuginfo-2.8.5-150700.3.15.1 * libexpat1-32bit-2.8.5-150700.3.15.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:32:20 -0000 Subject: SUSE-SU-2026:4618-1: moderate: Security update for python3-paramiko Message-ID: <179180834096.16296.12620738805148525594@81803ed3a673> # Security update for python3-paramiko Announcement ID: SUSE-SU-2026:4618-1 Release Date: 2026-10-12T07:22:31Z Rating: moderate References: * bsc#1264225 Cross-References: * CVE-2026-44405 CVSS scores: * CVE-2026-44405 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-44405 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-44405 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python3-paramiko fixes the following issue: * CVE-2026-44405: data integrity compromise due to allowed SHA-1 algorithm use (bsc#1264225). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4618 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4618 ## Package List: * openSUSE Leap 15.4 (noarch) * python3-paramiko-3.4.0-150400.9.9.1 * python3-paramiko-doc-3.4.0-150400.9.9.1 * Basesystem Module 15-SP7 (noarch) * python3-paramiko-3.4.0-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-44405.html * https://bugzilla.suse.com/show_bug.cgi?id=1264225 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:32:27 -0000 Subject: SUSE-SU-2026:4617-1: moderate: Security update for stunnel Message-ID: <179180834791.16296.14480294997153725218@81803ed3a673> # Security update for stunnel Announcement ID: SUSE-SU-2026:4617-1 Release Date: 2026-10-12T07:21:52Z Rating: moderate References: * bsc#1274206 * bsc#1274207 Cross-References: * CVE-2026-70367 * CVE-2026-70368 CVSS scores: * CVE-2026-70367 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-70367 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70367 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70368 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-70368 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-70368 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for stunnel fixes the following issues: * CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). * CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads (bsc#1274206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4617 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4617 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * stunnel-debugsource-5.70-150600.3.6.1 * stunnel-debuginfo-5.70-150600.3.6.1 * stunnel-5.70-150600.3.6.1 * openSUSE Leap 15.6 (noarch) * stunnel-doc-5.70-150600.3.6.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * stunnel-debugsource-5.70-150600.3.6.1 * stunnel-debuginfo-5.70-150600.3.6.1 * stunnel-5.70-150600.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-70367.html * https://www.suse.com/security/cve/CVE-2026-70368.html * https://bugzilla.suse.com/show_bug.cgi?id=1274206 * https://bugzilla.suse.com/show_bug.cgi?id=1274207 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:32:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:32:43 -0000 Subject: SUSE-SU-2026:4616-1: important: Security update for libsoup Message-ID: <179180836301.16296.2493037774545739915@81803ed3a673> # Security update for libsoup Announcement ID: SUSE-SU-2026:4616-1 Release Date: 2026-10-12T07:21:29Z Rating: important References: * bsc#1271448 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-12548 * CVE-2026-15713 * CVE-2026-2708 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4616 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4616 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4616 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4616 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4616 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4616 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4616 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4616 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4616 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (x86_64) * libsoup-3_0-0-32bit-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-32bit-3.0.4-150400.3.55.1 * libsoup-3_0-0-32bit-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-3_0-0-64bit-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-64bit-3.0.4-150400.3.55.1 * libsoup-3_0-0-64bit-3.0.4-150400.3.55.1 * openSUSE Leap 15.4 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-3_0-0-debuginfo-3.0.4-150400.3.55.1 * libsoup-devel-3.0.4-150400.3.55.1 * libsoup-3_0-0-3.0.4-150400.3.55.1 * typelib-1_0-Soup-3_0-3.0.4-150400.3.55.1 * libsoup-debugsource-3.0.4-150400.3.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup-lang-3.0.4-150400.3.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:33:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:33:12 -0000 Subject: SUSE-SU-2026:4615-1: important: Security update for expat Message-ID: <179180839245.16296.13729899738751576459@81803ed3a673> # Security update for expat Announcement ID: SUSE-SU-2026:4615-1 Release Date: 2026-10-12T07:20:29Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4615 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4615 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * expat-debugsource-2.8.5-21.55.1 * libexpat1-2.8.5-21.55.1 * expat-2.8.5-21.55.1 * libexpat-devel-2.8.5-21.55.1 * libexpat1-debuginfo-2.8.5-21.55.1 * expat-debuginfo-2.8.5-21.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * expat-debuginfo-32bit-2.8.5-21.55.1 * libexpat1-32bit-2.8.5-21.55.1 * libexpat1-debuginfo-32bit-2.8.5-21.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * expat-debugsource-2.8.5-21.55.1 * libexpat1-32bit-2.8.5-21.55.1 * libexpat1-2.8.5-21.55.1 * expat-2.8.5-21.55.1 * libexpat-devel-2.8.5-21.55.1 * libexpat1-debuginfo-2.8.5-21.55.1 * expat-debuginfo-32bit-2.8.5-21.55.1 * expat-debuginfo-2.8.5-21.55.1 * libexpat1-debuginfo-32bit-2.8.5-21.55.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 12:33:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 12:33:20 -0000 Subject: SUSE-SU-2026:4614-1: moderate: Security update for openssh8.4 Message-ID: <179180840033.16296.16581507003058957951@81803ed3a673> # Security update for openssh8.4 Announcement ID: SUSE-SU-2026:4614-1 Release Date: 2026-10-12T07:20:10Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh8.4 fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4614 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4614 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh8.4-helpers-debuginfo-8.4p1-8.27.1 * openssh8.4-debugsource-8.4p1-8.27.1 * openssh8.4-fips-8.4p1-8.27.1 * openssh8.4-common-debuginfo-8.4p1-8.27.1 * openssh8.4-8.4p1-8.27.1 * openssh8.4-server-8.4p1-8.27.1 * openssh8.4-clients-8.4p1-8.27.1 * openssh8.4-server-debuginfo-8.4p1-8.27.1 * openssh8.4-clients-debuginfo-8.4p1-8.27.1 * openssh8.4-helpers-8.4p1-8.27.1 * openssh8.4-common-8.4p1-8.27.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh8.4-helpers-debuginfo-8.4p1-8.27.1 * openssh8.4-debugsource-8.4p1-8.27.1 * openssh8.4-fips-8.4p1-8.27.1 * openssh8.4-common-debuginfo-8.4p1-8.27.1 * openssh8.4-8.4p1-8.27.1 * openssh8.4-server-8.4p1-8.27.1 * openssh8.4-clients-8.4p1-8.27.1 * openssh8.4-server-debuginfo-8.4p1-8.27.1 * openssh8.4-clients-debuginfo-8.4p1-8.27.1 * openssh8.4-helpers-8.4p1-8.27.1 * openssh8.4-common-8.4p1-8.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 16:30:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4625-1: important: Security update for go1.27 Message-ID: <179182263351.30414.2478516416876254466@35d72aa18c5b> # Security update for go1.27 Announcement ID: SUSE-SU-2026:4625-1 Release Date: 2026-10-12T08:25:06Z Rating: important References: * bsc#1272545 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 15 vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.27.2 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, the cover tool, the go fix command, vet, and the compress/flate, crypto/mlkem, encoding/json, encoding/json/v2, net/http, and os packages. * go#81084 encoding/json: Unmarshal leaves +/-Inf in the destination on float overflow in Go 1.27 * go#81145 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81226 runtime: netpoll: eventfd ready for something unexpected * go#81229 encoding/json: json.UnsupportedValueError returns an Invalid Value instead of a Float value * go#81233 compress/flate: Writer with a preset dictionary emits the dictionary into the output stream * go#81252 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81296 cmd/compile: internal compiler error: MoveLoop too small * go#81306 cmd/compile: go1.27.0 unified export data loses method order, breaking objectpath, crashing staticcheck * go#81324 plugin: loading multiple plugins corrupts stdlib types in Go 1.27 * go#81353 runtime: Go 1.27.0: SIGSEGV crash with generic function + pointer type parameter + embedded interface * go#81362 encoding/json: Marshal now honors MarshalText for string-kind map keys * go#81374 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81389 cmd/fix, x/tools/go/analysis/passes/modernize: errorsastype rewrites errors.As target interface that does not implement error * go#81402 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81411 net/http: concurrent response body Read and Close can deadlock with automatic draining in Go 1.27 * go#81437 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81469 runtime: ios/arm64 binaries executed outside an app bundle change working directory on startup * go#81515 net/http: readLoop reads Response.ContentLength after Body.Close returns * go#81516 net/http: Response.Body.Close returns the earlier Read error after a non-EOF Read failure * go#81522 net/http: Response.Trailer race due to response body draining * go#81580 testing: go test -v doubles ESC (0x1b) in t.Log output since Go 1.27, corrupting ANSI colors in some terminals * go#81666 cmd/compile: Embedded interfaces using tail calls cause race detector stack growth * go#81667 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81706 cmd/compile: ICE on 386 when inlining nested bit rotations (Int64Lo not lowered) * go#81816 net/http: Request.TLS is not properly populated for HTTP/2 requests * go#81818 cmd/internal/obj/ppc64: async preemption bug in BR (CTR) * go#81829 runtime: windows/amd64 stack corruption when LockOSThread wraps registry calls (new in Go 1.27) * go#81832 cmd/cover: NumStmt duplicated across split blocks, inflating statement coverage * go#81861 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81890 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4625 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4625 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4625 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4625 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4625 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4625 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4625 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4625 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4625 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4625 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4625 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-doc-1.27.2-150000.1.12.1 * go1.27-1.27.2-150000.1.12.1 * go1.27-race-1.27.2-150000.1.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:30:09 -0000 Subject: SUSE-SU-2026:4632-1: important: Security update for ghostscript Message-ID: <179183700923.4018.789658572359673370@00920b2f2f09> # Security update for ghostscript Announcement ID: SUSE-SU-2026:4632-1 Release Date: 2026-10-12T15:27:51Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4632 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4632 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4632 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4632 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4632 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4632 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4632 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4632 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4632 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4632 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4632 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * ghostscript-debugsource-9.52-150000.214.1 * ghostscript-devel-9.52-150000.214.1 * ghostscript-9.52-150000.214.1 * ghostscript-debuginfo-9.52-150000.214.1 * ghostscript-x11-debuginfo-9.52-150000.214.1 * ghostscript-x11-9.52-150000.214.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:30:27 -0000 Subject: SUSE-SU-2026:4631-1: important: Security update for libsoup Message-ID: <179183702752.4018.11661956835967811373@00920b2f2f09> # Security update for libsoup Announcement ID: SUSE-SU-2026:4631-1 Release Date: 2026-10-12T15:25:46Z Rating: important References: * bsc#1271448 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-12548 * CVE-2026-15713 * CVE-2026-2708 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4631 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4631 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4631 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4631 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (x86_64) * libsoup-devel-32bit-3.4.4-150600.3.59.1 * libsoup-3_0-0-32bit-debuginfo-3.4.4-150600.3.59.1 * libsoup-3_0-0-32bit-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-devel-64bit-3.4.4-150600.3.59.1 * libsoup-3_0-0-64bit-debuginfo-3.4.4-150600.3.59.1 * libsoup-3_0-0-64bit-3.4.4-150600.3.59.1 * openSUSE Leap 15.6 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * Basesystem Module 15-SP7 (noarch) * libsoup-lang-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-devel-3.4.4-150600.3.59.1 * libsoup-debugsource-3.4.4-150600.3.59.1 * libsoup-3_0-0-3.4.4-150600.3.59.1 * typelib-1_0-Soup-3_0-3.4.4-150600.3.59.1 * libsoup-3_0-0-debuginfo-3.4.4-150600.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup-lang-3.4.4-150600.3.59.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:4630-1: important: Security update for python310 Message-ID: <179183704276.4018.269006648607867627@00920b2f2f09> # Security update for python310 Announcement ID: SUSE-SU-2026:4630-1 Release Date: 2026-10-12T15:25:10Z Rating: important References: * bsc#1264962 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-7210 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves eight vulnerabilities can now be installed. ## Description: This update for python310 fixes the following issues: * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python310: * Update to 3.10.22 (final release, upstream EOS) * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049.(bsc#1280459, CVE-2026-82049) * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * gh-149018: Improved protection against XML hash-flooding attacks in xml.parsers.expat and xml.etree.ElementTree when Python is compiled with libExpat 2.8.0 or later. (bsc#1264962, CVE-2026-7210) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4630 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4630 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4630 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4630 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4630 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * python310-idle-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-doc-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-testsuite-3.10.22-150400.4.129.1 * python310-testsuite-debuginfo-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-doc-devhelp-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (x86_64) * libpython3_10-1_0-32bit-3.10.22-150400.4.129.1 * python310-32bit-3.10.22-150400.4.129.1 * python310-32bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-32bit-debuginfo-3.10.22-150400.4.129.1 * libpython3_10-1_0-32bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-32bit-3.10.22-150400.4.129.1 * openSUSE Leap 15.4 (aarch64_ilp32) * python310-64bit-debuginfo-3.10.22-150400.4.129.1 * python310-base-64bit-3.10.22-150400.4.129.1 * libpython3_10-1_0-64bit-debuginfo-3.10.22-150400.4.129.1 * python310-64bit-3.10.22-150400.4.129.1 * libpython3_10-1_0-64bit-3.10.22-150400.4.129.1 * python310-base-64bit-debuginfo-3.10.22-150400.4.129.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python310-curses-debuginfo-3.10.22-150400.4.129.1 * python310-devel-3.10.22-150400.4.129.1 * python310-base-debuginfo-3.10.22-150400.4.129.1 * python310-3.10.22-150400.4.129.1 * python310-base-3.10.22-150400.4.129.1 * python310-curses-3.10.22-150400.4.129.1 * python310-idle-3.10.22-150400.4.129.1 * python310-tools-3.10.22-150400.4.129.1 * python310-dbm-3.10.22-150400.4.129.1 * libpython3_10-1_0-debuginfo-3.10.22-150400.4.129.1 * python310-dbm-debuginfo-3.10.22-150400.4.129.1 * python310-tk-3.10.22-150400.4.129.1 * libpython3_10-1_0-3.10.22-150400.4.129.1 * python310-debuginfo-3.10.22-150400.4.129.1 * python310-tk-debuginfo-3.10.22-150400.4.129.1 * python310-debugsource-3.10.22-150400.4.129.1 * python310-core-debugsource-3.10.22-150400.4.129.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:31:05 -0000 Subject: SUSE-SU-2026:4629-1: important: Security update for go1.26 Message-ID: <179183706599.4018.6913477487843230195@00920b2f2f09> # Security update for go1.26 Announcement ID: SUSE-SU-2026:4629-1 Release Date: 2026-10-12T15:15:28Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284771 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78667 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 13 vulnerabilities and has one security fix can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.26.9 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, vet, and the crypto/mlkem, net/http, and os packages. * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4629 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4629 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4629 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4629 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4629 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4629 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4629 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4629 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4629 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4629 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4629 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.9-150000.1.33.1 * go1.26-race-1.26.9-150000.1.33.1 * go1.26-doc-1.26.9-150000.1.33.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:31:40 -0000 Subject: SUSE-SU-2026:4628-1: important: Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid Message-ID: <179183710033.4018.1573416603521745654@00920b2f2f09> # Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid Announcement ID: SUSE-SU-2026:4628-1 Release Date: 2026-10-12T14:58:55Z Rating: important References: * bsc#1267271 * bsc#1267273 * bsc#1267276 * bsc#1276980 * bsc#1276990 * bsc#1278267 * bsc#1278269 * bsc#1278272 * bsc#1278462 * bsc#1278477 * bsc#1278505 * bsc#1278742 * bsc#1278743 * bsc#1278751 * bsc#1278763 * bsc#1279072 * bsc#1279080 * bsc#1279137 * bsc#1279243 * bsc#1279245 * bsc#1279252 * bsc#1279263 * bsc#1279386 * bsc#1280175 Cross-References: * CVE-2026-44740 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-78662 * CVE-2026-84303 * CVE-2026-84304 * CVE-2026-84445 CVSS scores: * CVE-2026-44740 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-44740 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-44740 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves nine vulnerabilities and has 15 security fixes can now be installed. ## Description: This update for terraform-provider-aws, terraform-provider-azurerm, terraform- provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider- null, terraform-provider-random, terraform-provider-tls fixes the following issues: Security issues fixed: * CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite loops, panics or resource consumption (bsc#1267271 bsc#1267273 bsc#1267276). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278462 bsc#1278477 bsc#1278505). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276980). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276990). * CVE-2026-84303: github.com/grpc/grpc-go: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1278269 bsc#1279243 bsc#1279245 bsc#1279252 bsc#1279263 bsc#1279386). * CVE-2026-84304: github.com/grpc/grpc-go: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1278272 bsc#1279072 bsc#1279080 bsc#1279137). * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1278742 bsc#1278743 bsc#1278751 bsc#1278763). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1278267). Non security issue fixed: * terraform-provider-{aws,external,google,random,tls}: aarch64 build installs provider binary under linux_amd64 instead of linux_arm64, breaking terraform init (bsc#1280175). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4628 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4628 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * terraform-provider-local-2.0.0-150200.6.30.2 * terraform-provider-null-3.0.0-150200.6.32.2 * terraform-provider-external-2.0.0-150200.6.23.2 * terraform-provider-helm-2.9.0-150200.6.34.2 * terraform-provider-google-3.43.0-150200.6.23.2 * terraform-provider-kubernetes-1.13.2-150200.6.23.2 * terraform-provider-azurerm-2.32.0-150200.6.23.2 * terraform-provider-aws-3.11.0-150200.6.29.2 * terraform-provider-tls-3.0.0-150200.5.26.2 * terraform-provider-random-3.0.0-150200.6.26.2 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * terraform-provider-local-2.0.0-150200.6.30.2 * terraform-provider-null-3.0.0-150200.6.32.2 * terraform-provider-external-2.0.0-150200.6.23.2 * terraform-provider-helm-2.9.0-150200.6.34.2 * terraform-provider-google-3.43.0-150200.6.23.2 * terraform-provider-kubernetes-1.13.2-150200.6.23.2 * terraform-provider-azurerm-2.32.0-150200.6.23.2 * terraform-provider-aws-3.11.0-150200.6.29.2 * terraform-provider-tls-3.0.0-150200.5.26.2 * terraform-provider-random-3.0.0-150200.6.26.2 ## References: * https://www.suse.com/security/cve/CVE-2026-44740.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://www.suse.com/security/cve/CVE-2026-84445.html * https://bugzilla.suse.com/show_bug.cgi?id=1267271 * https://bugzilla.suse.com/show_bug.cgi?id=1267273 * https://bugzilla.suse.com/show_bug.cgi?id=1267276 * https://bugzilla.suse.com/show_bug.cgi?id=1276980 * https://bugzilla.suse.com/show_bug.cgi?id=1276990 * https://bugzilla.suse.com/show_bug.cgi?id=1278267 * https://bugzilla.suse.com/show_bug.cgi?id=1278269 * https://bugzilla.suse.com/show_bug.cgi?id=1278272 * https://bugzilla.suse.com/show_bug.cgi?id=1278462 * https://bugzilla.suse.com/show_bug.cgi?id=1278477 * https://bugzilla.suse.com/show_bug.cgi?id=1278505 * https://bugzilla.suse.com/show_bug.cgi?id=1278742 * https://bugzilla.suse.com/show_bug.cgi?id=1278743 * https://bugzilla.suse.com/show_bug.cgi?id=1278751 * https://bugzilla.suse.com/show_bug.cgi?id=1278763 * https://bugzilla.suse.com/show_bug.cgi?id=1279072 * https://bugzilla.suse.com/show_bug.cgi?id=1279080 * https://bugzilla.suse.com/show_bug.cgi?id=1279137 * https://bugzilla.suse.com/show_bug.cgi?id=1279243 * https://bugzilla.suse.com/show_bug.cgi?id=1279245 * https://bugzilla.suse.com/show_bug.cgi?id=1279252 * https://bugzilla.suse.com/show_bug.cgi?id=1279263 * https://bugzilla.suse.com/show_bug.cgi?id=1279386 * https://bugzilla.suse.com/show_bug.cgi?id=1280175 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:31:48 -0000 Subject: SUSE-SU-2026:4627-1: important: Security update for MozillaThunderbird Message-ID: <179183710878.4018.955146861605090965@00920b2f2f09> # Security update for MozillaThunderbird Announcement ID: SUSE-SU-2026:4627-1 Release Date: 2026-10-12T14:57:42Z Rating: important References: * bsc#1280371 * bsc#1282929 Cross-References: * CVE-2026-100756 * CVE-2026-100757 * CVE-2026-100758 * CVE-2026-100759 * CVE-2026-100760 * CVE-2026-100762 * CVE-2026-100765 * CVE-2026-100766 * CVE-2026-100767 * CVE-2026-100769 * CVE-2026-100770 * CVE-2026-100771 * CVE-2026-100772 * CVE-2026-100773 * CVE-2026-100774 * CVE-2026-100775 * CVE-2026-100776 * CVE-2026-100777 * CVE-2026-100778 * CVE-2026-100779 * CVE-2026-100780 * CVE-2026-100781 * CVE-2026-100782 * CVE-2026-100783 * CVE-2026-100784 * CVE-2026-100785 * CVE-2026-100786 * CVE-2026-100787 * CVE-2026-100788 * CVE-2026-100789 * CVE-2026-100790 * CVE-2026-100791 * CVE-2026-100792 * CVE-2026-100794 * CVE-2026-100797 * CVE-2026-100798 * CVE-2026-100800 * CVE-2026-100801 * CVE-2026-100803 * CVE-2026-100806 * CVE-2026-100807 * CVE-2026-100808 * CVE-2026-100809 * CVE-2026-100811 * CVE-2026-100812 * CVE-2026-100814 * CVE-2026-100815 * CVE-2026-100816 * CVE-2026-100818 * CVE-2026-100819 * CVE-2026-100820 * CVE-2026-100821 * CVE-2026-100822 * CVE-2026-100824 * CVE-2026-100825 * CVE-2026-100826 * CVE-2026-100828 * CVE-2026-100829 * CVE-2026-100830 * CVE-2026-100831 * CVE-2026-100832 * CVE-2026-103500 * CVE-2026-92005 * CVE-2026-92006 * CVE-2026-92007 * CVE-2026-92008 * CVE-2026-92009 * CVE-2026-92010 * CVE-2026-92011 * CVE-2026-92012 * CVE-2026-92013 * CVE-2026-92015 * CVE-2026-92016 * CVE-2026-92017 * CVE-2026-92018 * CVE-2026-92019 * CVE-2026-92020 * CVE-2026-92022 * CVE-2026-92023 * CVE-2026-92024 * CVE-2026-92025 * CVE-2026-92026 * CVE-2026-92027 * CVE-2026-92028 * CVE-2026-92029 * CVE-2026-92030 * CVE-2026-92031 * CVE-2026-92032 * CVE-2026-92035 * CVE-2026-92038 * CVE-2026-92039 * CVE-2026-92041 * CVE-2026-92042 * CVE-2026-92043 * CVE-2026-92044 * CVE-2026-92045 * CVE-2026-92046 * CVE-2026-92047 * CVE-2026-92048 * CVE-2026-92049 * CVE-2026-92052 * CVE-2026-92053 * CVE-2026-92054 * CVE-2026-92055 * CVE-2026-92056 * CVE-2026-92057 * CVE-2026-92058 * CVE-2026-92059 * CVE-2026-92060 * CVE-2026-92062 * CVE-2026-92064 * CVE-2026-92065 * CVE-2026-92067 * CVE-2026-92068 * CVE-2026-92069 * CVE-2026-92070 * CVE-2026-92071 * CVE-2026-92072 * CVE-2026-92073 * CVE-2026-92074 * CVE-2026-92075 * CVE-2026-92076 * CVE-2026-92077 * CVE-2026-92078 * CVE-2026-92079 * CVE-2026-92238 * CVE-2026-92239 * CVE-2026-92240 * CVE-2026-96869 CVSS scores: * CVE-2026-100756 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100758 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100760 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100762 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100765 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100766 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-100767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100769 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100770 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100771 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100772 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100773 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100774 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100775 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100776 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100777 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100778 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100779 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100780 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100782 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100783 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100784 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100785 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100786 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100787 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100788 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100789 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100790 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100791 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100792 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-100794 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100797 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100798 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100800 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100803 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100806 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-100807 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100808 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100809 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100811 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100812 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100814 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100815 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100816 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100818 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100819 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100820 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100821 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-100822 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-100824 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100825 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100826 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-100828 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100829 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-100830 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-100831 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-100832 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92005 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92006 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92006 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92007 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92008 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92009 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92010 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92011 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92012 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92013 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92015 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92016 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92017 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92018 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92019 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-92020 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92022 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92023 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92025 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92026 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92027 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92028 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92029 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92030 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-92031 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-92032 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92035 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92038 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92039 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-92041 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92042 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92043 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92044 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92045 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92046 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92047 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92048 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92049 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92052 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92053 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92054 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92055 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92056 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92057 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92058 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92059 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92060 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92062 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92064 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92065 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92067 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92068 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-92069 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-92070 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-92071 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-92072 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92073 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-92074 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92075 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92076 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-92077 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-92078 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-92079 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-92238 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92239 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-92240 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-96869 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 129 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.4 (MFSA 2026-96, MFSA 2026-103, bsc#1280371, bsc#1282929): * CVE-2026-92005: Use-after-free in the Audio/Video: Web Codecs component. * CVE-2026-92006: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92007: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92008: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92009: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92010: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92011: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92012: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92013: Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-92015: Privilege escalation in the WebExtensions component. * CVE-2026-92016: Use-after-free in the Disability Access APIs component. * CVE-2026-92017: Privilege escalation in the DOM: Service Workers component. * CVE-2026-92018: Sandbox escape in the DOM: Core & HTML component. * CVE-2026-92019: Mitigation bypass in the Remote Settings Client component. * CVE-2026-92020: Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-92022: Use-after-free in the DOM: HTML Parser component. * CVE-2026-92023: Use-after-free in the XML component. * CVE-2026-92024: Use-after-free in the SVG component. * CVE-2026-92025: Use-after-free in the DOM: Navigation component. * CVE-2026-92026: Use-after-free in the Networking component. * CVE-2026-92027: Use-after-free in the DOM: Streams component. * CVE-2026-92028: Use-after-free in the DOM: Core & HTML component. * CVE-2026-92029: Use-after-free in the SVG component. * CVE-2026-92030: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. * CVE-2026-92031: Information disclosure in the Graphics: ImageLib component. * CVE-2026-92032: Sandbox escape due to invalid pointer in the Graphics component. * CVE-2026-92035: Sandbox escape due to incorrect boundary conditions in the Graphics component. * CVE-2026-92038: Mitigation bypass in the Remote Settings Client component. * CVE-2026-92039: Mitigation bypass in the DOM: Notifications component. * CVE-2026-92041: Mitigation bypass in the DOM: Networking component. * CVE-2026-92042: Race condition in the DOM: Content Processes component. * CVE-2026-92043: Privilege escalation due to incorrect boundary conditions in the Audio/Video component. * CVE-2026-92044: Information disclosure in the Networking: HTTP component. * CVE-2026-92045: Sandbox escape due to incorrect boundary conditions in the WebRTC component. * CVE-2026-92046: Use-after-free in the Graphics component. * CVE-2026-92047: Privilege escalation in the Crash Reporting component. * CVE-2026-92048: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92049: Use-after-free in the Widget: Win32 component. * CVE-2026-92052: Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. * CVE-2026-92053: Privilege escalation in the Graphics: CanvasWebGL component. * CVE-2026-92054: Privilege escalation in the Memory component. * CVE-2026-92055: Privilege escalation in the DevTools component. * CVE-2026-92056: Use-after-free in the Graphics: Text component. * CVE-2026-92057: Mitigation bypass in the Enterprise Policies component. * CVE-2026-92058: Use-after-free in the Graphics component. * CVE-2026-92059: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-92060: Use-after-free in the Internationalization component. * CVE-2026-92062: Privilege escalation in the Session Restore component. * CVE-2026-92064: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92065: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92067: Use-after-free in the Widget: Gtk component. * CVE-2026-92068: Site isolation issue in the Reader Mode component. * CVE-2026-92069: Spoofing issue in the DOM: Navigation component. * CVE-2026-92070: Information disclosure in the Networking component. * CVE-2026-92071: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-92072: Incorrect boundary conditions in the Safe Browsing component. * CVE-2026-92073: Privilege escalation in the Enterprise Policies component. * CVE-2026-92074: Mitigation bypass in the Popup Blocker component. * CVE-2026-92075: Mitigation bypass in the Networking component. * CVE-2026-92076: Incorrect boundary conditions in the Networking component. * CVE-2026-92077: Denial-of-service in the SVG component. * CVE-2026-92078: Denial-of-service in the Security component. * CVE-2026-92079: Mitigation bypass in the Widget: Win32 component. * CVE-2026-92238: Ambiguous parsing of mail headers. * CVE-2026-92239: Buffer overrun in IMAP. * CVE-2026-92240: Out-of-bounds read in IMAP response parser. * CVE-2026-96869: Information disclosure in the Networking component. * CVE-2026-100756: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-100757: Use-after-free in the Widget component. * CVE-2026-100758: Sandbox escape in the DOM: Navigation component. * CVE-2026-100759: Uninitialized memory in the Storage: Quota Manager component. * CVE-2026-100760: Sandbox escape in the Security: Process Sandboxing component. * CVE-2026-100762: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100765: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100766: Information disclosure in the Networking: JAR component. * CVE-2026-100767: Use-after-free in the Networking: Cache component. * CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100770: Sandbox escape due to use-after-free in the DOM: Content Processes component. * CVE-2026-100771: Undefined behavior in the DOM: Streams component. * CVE-2026-100772: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100773: Use-after-free in the Storage: IndexedDB component. * CVE-2026-100774: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100775: Sandbox escape in the Graphics component. * CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component. * CVE-2026-100777: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100778: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100779: Use-after-free in the XSLT component. * CVE-2026-100780: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100781: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-100782: Privilege escalation due to incorrect boundary conditions in the Graphics component. * CVE-2026-100783: Uninitialized memory in the Audio/Video component. * CVE-2026-100784: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-100785: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100786: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-100787: Sandbox escape in the XUL component. * CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component. * CVE-2026-100789: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-100790: Use-after-free in the XSLT component. * CVE-2026-100791: Use-after-free in the DOM: Core & HTML component. * CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-100794: Sandbox escape due to incorrect boundary conditions in the Internationalization component. * CVE-2026-100797: Privilege escalation due to use-after-free in the Graphics: WebRender component. * CVE-2026-100798: Cryptography misuse in Storage: Quota Manager component. * CVE-2026-100800: Sandbox escape due to use-after-free in the Disability Access APIs component. * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-100803: Same-origin policy bypass in the WebExtensions component. * CVE-2026-100806: Uninitialized memory in the Graphics: WebGPU component. * CVE-2026-100807: Privilege escalation in the DOM: Service Workers component. * CVE-2026-100808: Mitigation bypass in the DOM: Service Workers component. * CVE-2026-100809: Same-origin policy bypass in the DevTools component. * CVE-2026-100811: Sandbox escape due to use-after-free in the DOM: Core & HTML component. * CVE-2026-100812: Denial-of-service in the Graphics component. * CVE-2026-100814: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-100815: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-100816: Site isolation issue in the DOM: Networking component. * CVE-2026-100818: Sandbox escape due to use-after-free in the Widget: Gtk component. * CVE-2026-100819: Sandbox escape due to incorrect boundary conditions in the XPCOM component. * CVE-2026-100820: Privilege escalation in the Address Bar component. * CVE-2026-100821: Site isolation issue in the Panning and Zooming component. * CVE-2026-100822: Spoofing issue in the Networking: HTTP component. * CVE-2026-100824: Privilege escalation in the Places component. * CVE-2026-100825: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-100826: Denial-of-service in the Storage: StorageManager component. * CVE-2026-100828: Mitigation bypass in the Bookmarks & History component. * CVE-2026-100829: Mitigation bypass in the DOM: Security component. * CVE-2026-100830: Mitigation bypass in the DOM: Navigation component. * CVE-2026-100831: Use-after-free in the DOM: UI Events & Focus Handling component. * CVE-2026-100832: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-103500: Heap buffer overflow opening large email. Changes for MozillaThunderbird: * changed: RNP command-line utilities are no longer included with Thunderbird (bmo#2068130) * changed: Thundermail built-in add-on updated to v2.0.16 (bmo#2071989) * fixed: Ctrl+Shift+K could fail to open the Quick Filter UI (bmo#2062942) * fixed: Nested S/MIME signed parts could fail to render (bmo#2062971) * fixed: Thunderbird could hang when waiting for IMAP server greeting during account setup (bmo#2028760) * fixed: Gmail OAuth2 authentication could intermittently fail on Windows (bmo#2063816) * fixed: `AppUpdatePin` policy did not prevent Thunderbird from updating beyond pinned version (bmo#1910603) * fixed: "What's New?" linked to Release channel notes instead of ESR release notes (bmo#2073813) * fixed: Detached attachment links were truncated when folder path contained `&` (bmo#2060451) * fixed: Save All, Detach All, and Delete All failed after deleting one attachment (bmo#2057025) * fixed: Blank 1970-dated messages could appear from incomplete message file copies (bmo#209501) * fixed: Forwarded messages could display incorrect encoding (bmo#2059963) * fixed: Manual Get Messages failed after startup until toggling offline mode (bmo#2057431) * fixed: Thunderbird could crash on shutdown while waiting for OAuth2 password entry (bmo#1524247) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4627 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4627 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4627 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * MozillaThunderbird-debugsource-153.4.0-150400.13.6.1 * MozillaThunderbird-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-common-153.4.0-150400.13.6.1 * MozillaThunderbird-debuginfo-153.4.0-150400.13.6.1 * MozillaThunderbird-translations-other-153.4.0-150400.13.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-100756.html * https://www.suse.com/security/cve/CVE-2026-100757.html * https://www.suse.com/security/cve/CVE-2026-100758.html * https://www.suse.com/security/cve/CVE-2026-100759.html * https://www.suse.com/security/cve/CVE-2026-100760.html * https://www.suse.com/security/cve/CVE-2026-100762.html * https://www.suse.com/security/cve/CVE-2026-100765.html * https://www.suse.com/security/cve/CVE-2026-100766.html * https://www.suse.com/security/cve/CVE-2026-100767.html * https://www.suse.com/security/cve/CVE-2026-100769.html * https://www.suse.com/security/cve/CVE-2026-100770.html * https://www.suse.com/security/cve/CVE-2026-100771.html * https://www.suse.com/security/cve/CVE-2026-100772.html * https://www.suse.com/security/cve/CVE-2026-100773.html * https://www.suse.com/security/cve/CVE-2026-100774.html * https://www.suse.com/security/cve/CVE-2026-100775.html * https://www.suse.com/security/cve/CVE-2026-100776.html * https://www.suse.com/security/cve/CVE-2026-100777.html * https://www.suse.com/security/cve/CVE-2026-100778.html * https://www.suse.com/security/cve/CVE-2026-100779.html * https://www.suse.com/security/cve/CVE-2026-100780.html * https://www.suse.com/security/cve/CVE-2026-100781.html * https://www.suse.com/security/cve/CVE-2026-100782.html * https://www.suse.com/security/cve/CVE-2026-100783.html * https://www.suse.com/security/cve/CVE-2026-100784.html * https://www.suse.com/security/cve/CVE-2026-100785.html * https://www.suse.com/security/cve/CVE-2026-100786.html * https://www.suse.com/security/cve/CVE-2026-100787.html * https://www.suse.com/security/cve/CVE-2026-100788.html * https://www.suse.com/security/cve/CVE-2026-100789.html * https://www.suse.com/security/cve/CVE-2026-100790.html * https://www.suse.com/security/cve/CVE-2026-100791.html * https://www.suse.com/security/cve/CVE-2026-100792.html * https://www.suse.com/security/cve/CVE-2026-100794.html * https://www.suse.com/security/cve/CVE-2026-100797.html * https://www.suse.com/security/cve/CVE-2026-100798.html * https://www.suse.com/security/cve/CVE-2026-100800.html * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-100803.html * https://www.suse.com/security/cve/CVE-2026-100806.html * https://www.suse.com/security/cve/CVE-2026-100807.html * https://www.suse.com/security/cve/CVE-2026-100808.html * https://www.suse.com/security/cve/CVE-2026-100809.html * https://www.suse.com/security/cve/CVE-2026-100811.html * https://www.suse.com/security/cve/CVE-2026-100812.html * https://www.suse.com/security/cve/CVE-2026-100814.html * https://www.suse.com/security/cve/CVE-2026-100815.html * https://www.suse.com/security/cve/CVE-2026-100816.html * https://www.suse.com/security/cve/CVE-2026-100818.html * https://www.suse.com/security/cve/CVE-2026-100819.html * https://www.suse.com/security/cve/CVE-2026-100820.html * https://www.suse.com/security/cve/CVE-2026-100821.html * https://www.suse.com/security/cve/CVE-2026-100822.html * https://www.suse.com/security/cve/CVE-2026-100824.html * https://www.suse.com/security/cve/CVE-2026-100825.html * https://www.suse.com/security/cve/CVE-2026-100826.html * https://www.suse.com/security/cve/CVE-2026-100828.html * https://www.suse.com/security/cve/CVE-2026-100829.html * https://www.suse.com/security/cve/CVE-2026-100830.html * https://www.suse.com/security/cve/CVE-2026-100831.html * https://www.suse.com/security/cve/CVE-2026-100832.html * https://www.suse.com/security/cve/CVE-2026-103500.html * https://www.suse.com/security/cve/CVE-2026-92005.html * https://www.suse.com/security/cve/CVE-2026-92006.html * https://www.suse.com/security/cve/CVE-2026-92007.html * https://www.suse.com/security/cve/CVE-2026-92008.html * https://www.suse.com/security/cve/CVE-2026-92009.html * https://www.suse.com/security/cve/CVE-2026-92010.html * https://www.suse.com/security/cve/CVE-2026-92011.html * https://www.suse.com/security/cve/CVE-2026-92012.html * https://www.suse.com/security/cve/CVE-2026-92013.html * https://www.suse.com/security/cve/CVE-2026-92015.html * https://www.suse.com/security/cve/CVE-2026-92016.html * https://www.suse.com/security/cve/CVE-2026-92017.html * https://www.suse.com/security/cve/CVE-2026-92018.html * https://www.suse.com/security/cve/CVE-2026-92019.html * https://www.suse.com/security/cve/CVE-2026-92020.html * https://www.suse.com/security/cve/CVE-2026-92022.html * https://www.suse.com/security/cve/CVE-2026-92023.html * https://www.suse.com/security/cve/CVE-2026-92024.html * https://www.suse.com/security/cve/CVE-2026-92025.html * https://www.suse.com/security/cve/CVE-2026-92026.html * https://www.suse.com/security/cve/CVE-2026-92027.html * https://www.suse.com/security/cve/CVE-2026-92028.html * https://www.suse.com/security/cve/CVE-2026-92029.html * https://www.suse.com/security/cve/CVE-2026-92030.html * https://www.suse.com/security/cve/CVE-2026-92031.html * https://www.suse.com/security/cve/CVE-2026-92032.html * https://www.suse.com/security/cve/CVE-2026-92035.html * https://www.suse.com/security/cve/CVE-2026-92038.html * https://www.suse.com/security/cve/CVE-2026-92039.html * https://www.suse.com/security/cve/CVE-2026-92041.html * https://www.suse.com/security/cve/CVE-2026-92042.html * https://www.suse.com/security/cve/CVE-2026-92043.html * https://www.suse.com/security/cve/CVE-2026-92044.html * https://www.suse.com/security/cve/CVE-2026-92045.html * https://www.suse.com/security/cve/CVE-2026-92046.html * https://www.suse.com/security/cve/CVE-2026-92047.html * https://www.suse.com/security/cve/CVE-2026-92048.html * https://www.suse.com/security/cve/CVE-2026-92049.html * https://www.suse.com/security/cve/CVE-2026-92052.html * https://www.suse.com/security/cve/CVE-2026-92053.html * https://www.suse.com/security/cve/CVE-2026-92054.html * https://www.suse.com/security/cve/CVE-2026-92055.html * https://www.suse.com/security/cve/CVE-2026-92056.html * https://www.suse.com/security/cve/CVE-2026-92057.html * https://www.suse.com/security/cve/CVE-2026-92058.html * https://www.suse.com/security/cve/CVE-2026-92059.html * https://www.suse.com/security/cve/CVE-2026-92060.html * https://www.suse.com/security/cve/CVE-2026-92062.html * https://www.suse.com/security/cve/CVE-2026-92064.html * https://www.suse.com/security/cve/CVE-2026-92065.html * https://www.suse.com/security/cve/CVE-2026-92067.html * https://www.suse.com/security/cve/CVE-2026-92068.html * https://www.suse.com/security/cve/CVE-2026-92069.html * https://www.suse.com/security/cve/CVE-2026-92070.html * https://www.suse.com/security/cve/CVE-2026-92071.html * https://www.suse.com/security/cve/CVE-2026-92072.html * https://www.suse.com/security/cve/CVE-2026-92073.html * https://www.suse.com/security/cve/CVE-2026-92074.html * https://www.suse.com/security/cve/CVE-2026-92075.html * https://www.suse.com/security/cve/CVE-2026-92076.html * https://www.suse.com/security/cve/CVE-2026-92077.html * https://www.suse.com/security/cve/CVE-2026-92078.html * https://www.suse.com/security/cve/CVE-2026-92079.html * https://www.suse.com/security/cve/CVE-2026-92238.html * https://www.suse.com/security/cve/CVE-2026-92239.html * https://www.suse.com/security/cve/CVE-2026-92240.html * https://www.suse.com/security/cve/CVE-2026-96869.html * https://bugzilla.suse.com/show_bug.cgi?id=1280371 * https://bugzilla.suse.com/show_bug.cgi?id=1282929 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 12 20:31:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 12 Oct 2026 20:31:59 -0000 Subject: SUSE-SU-2026:4626-1: moderate: Security update for python-Django Message-ID: <179183711927.4018.7608125574144081800@00920b2f2f09> # Security update for python-Django Announcement ID: SUSE-SU-2026:4626-1 Release Date: 2026-10-12T14:57:16Z Rating: moderate References: * bsc#1284471 * bsc#1284472 * bsc#1284476 * bsc#1284481 Cross-References: * CVE-2026-77050 * CVE-2026-84429 * CVE-2026-87890 * CVE-2026-87975 CVSS scores: * CVE-2026-77050 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77050 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77050 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77050 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84429 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84429 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84429 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-87890 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-87890 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-87890 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-87975 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87975 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-87975 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for python-Django fixes the following issues: * CVE-2026-77050: potential denial-of-service in `get_supported_language_variant()` when processing many distinct, very long language codes (bsc#1284481). * CVE-2026-84429: potential denial-of-service attack due to quadratic time complexity when parsing a value with many separators inside a quoted parameter (bsc#1284476). * CVE-2026-87890: An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who can supply `bytes` values to cause the Django process to make network requests via a crafted VRT document (bsc#1284472). * CVE-2026-87975: an authenticated user permitted to submit a formset to delete rows outside the limiting queryset, without any permission on the targeted object, marking an out-of-queryset object for deletion (bsc#1284471). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4626 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4626 ## Package List: * openSUSE Leap 15.6 (noarch) * python311-Django-4.2.11-150600.3.68.1 * SUSE Package Hub 15 15-SP7 (noarch) * python311-Django-4.2.11-150600.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77050.html * https://www.suse.com/security/cve/CVE-2026-84429.html * https://www.suse.com/security/cve/CVE-2026-87890.html * https://www.suse.com/security/cve/CVE-2026-87975.html * https://bugzilla.suse.com/show_bug.cgi?id=1284471 * https://bugzilla.suse.com/show_bug.cgi?id=1284472 * https://bugzilla.suse.com/show_bug.cgi?id=1284476 * https://bugzilla.suse.com/show_bug.cgi?id=1284481 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:30:09 -0000 Subject: SUSE-SU-2026:24130-1: moderate: Security update for libpng16 Message-ID: <179188020931.4437.16055521137810108946@00920b2f2f09> # Security update for libpng16 Announcement ID: SUSE-SU-2026:24130-1 Release Date: 2026-10-10T11:21:38Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed CVE-2026-46675 (medium severity): Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (Reported independently by Ze Sheng and .) * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. (Contributed by Yuki Sekiguchi.) * Prevented a double free of `png_struct` members after an allocation failure. (Contributed by Anthony Hurtado.) * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1897 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:30:24 -0000 Subject: SUSE-SU-2026:24129-1: important: Security update for gcc13 Message-ID: <179188022430.4437.6035404143693955250@00920b2f2f09> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24129-1 Release Date: 2026-10-09T18:18:08Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1896 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gcc13-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:30:42 -0000 Subject: SUSE-SU-2026:24128-1: important: Security update for unbound Message-ID: <179188024220.4437.9098506832617764113@00920b2f2f09> # Security update for unbound Announcement ID: SUSE-SU-2026:24128-1 Release Date: 2026-10-09T15:10:18Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1895 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libunbound8-debuginfo-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:30:49 -0000 Subject: SUSE-SU-2026:24127-1: important: Security update for virtiofsd Message-ID: <179188024904.4437.5020184097529254964@00920b2f2f09> # Security update for virtiofsd Announcement ID: SUSE-SU-2026:24127-1 Release Date: 2026-10-09T12:45:44Z Rating: important References: * bsc#1257912 * bsc#1283239 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for virtiofsd fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * Add command line options for UID/GID translation (bsc#1283239) * PassthroughFs: Add IdMap structures (bsc#1283239) * Add host/guest UID/GID translation code (bsc#1283239) * Custom UID/GID mapping for Attr (bsc#1283239) * Add UID/GID mapping functions to PassthroughFs (bsc#1283239) * Use explicit UID/GID types (bsc#1283239) * Introduce explicit UID/GID types (bsc#1283239) * Use SetattrIn without conversion (bsc#1283239) * Use fuse::Attr in FileSystem interfaces (bsc#1283239) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1892 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * virtiofsd-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-debugsource-1.12.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257912 * https://bugzilla.suse.com/show_bug.cgi?id=1283239 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:31:07 -0000 Subject: SUSE-SU-2026:24126-1: important: Security update for python-PyJWT Message-ID: <179188026775.4437.6112626621819361585@00920b2f2f09> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24126-1 Release Date: 2026-10-09T12:17:21Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1887 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-PyJWT-2.12.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:31:15 -0000 Subject: SUSE-SU-2026:24125-1: important: Security update for python-urllib3 Message-ID: <179188027583.4437.15275219918346525012@00920b2f2f09> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:24125-1 Release Date: 2026-10-09T11:45:30Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1884 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-urllib3-2.5.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:31:31 -0000 Subject: SUSE-SU-2026:24122-1: important: Security update for python-anyio Message-ID: <179188029132.4437.12349277404946812709@00920b2f2f09> # Security update for python-anyio Announcement ID: SUSE-SU-2026:24122-1 Release Date: 2026-10-08T10:52:11Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1873 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-anyio-4.8.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:31:40 -0000 Subject: SUSE-SU-2026:24121-1: important: Security update for python-tornado6 Message-ID: <179188030089.4437.3699158176272926923@00920b2f2f09> # Security update for python-tornado6 Announcement ID: SUSE-SU-2026:24121-1 Release Date: 2026-10-08T10:52:11Z Rating: important References: * bsc#1261922 * bsc#1277725 * bsc#1281439 * bsc#1281440 Cross-References: * CVE-2026-82397 * CVE-2026-91990 * CVE-2026-91991 CVSS scores: * CVE-2026-82397 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82397 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91991 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2026-91991 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91991 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for python-tornado6 fixes the following issues: * CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). * CVE-2026-91990: splitting of multipart data before validation of the `max_parts` limit allows for resource exhaustion and a denial of service (bsc#1281439). * CVE-2026-91991: incomplete fix for cookie attribute injection allows for cookie validation bypass via semicolon- delimited data in capitalized parameters (bsc#1281440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1872 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 * python313-tornado6-debuginfo-6.5-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82397.html * https://www.suse.com/security/cve/CVE-2026-91990.html * https://www.suse.com/security/cve/CVE-2026-91991.html * https://bugzilla.suse.com/show_bug.cgi?id=1261922 * https://bugzilla.suse.com/show_bug.cgi?id=1277725 * https://bugzilla.suse.com/show_bug.cgi?id=1281439 * https://bugzilla.suse.com/show_bug.cgi?id=1281440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:31:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:31:48 -0000 Subject: SUSE-SU-2026:24120-1: important: Security update for helm Message-ID: <179188030834.4437.11187070473573527852@00920b2f2f09> # Security update for helm Announcement ID: SUSE-SU-2026:24120-1 Release Date: 2026-10-08T06:16:18Z Rating: important References: * bsc#1281112 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-63209 * CVE-2026-81870 * CVE-2026-85732 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1870 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Micro 6.2 (noarch) * helm-bash-completion-4.3.0-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:32:02 -0000 Subject: SUSE-SU-2026:24119-1: moderate: Security update for libXi Message-ID: <179188032281.4437.15956555594266948208@00920b2f2f09> # Security update for libXi Announcement ID: SUSE-SU-2026:24119-1 Release Date: 2026-10-08T06:15:07Z Rating: moderate References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 Cross-References: * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: out-of-bounds read in XI2 class parser (bsc#1281608). * CVE-2026-93544: out-of-bounds read in XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: out-of-bounds read in ListInputDevices() (bsc#1281612). * CVE-2026-94281: out-of-bounds read in XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: out-of-bounds read in XI2 enter/leave/focus cookie conversio (bsc#1281651). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1867 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libXi-debugsource-1.8.2-160000.4.1 * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:32:10 -0000 Subject: SUSE-SU-2026:24118-1: moderate: Security update for libX11 Message-ID: <179188033095.4437.6972253763190469269@00920b2f2f09> # Security update for libX11 Announcement ID: SUSE-SU-2026:24118-1 Release Date: 2026-10-08T06:13:50Z Rating: moderate References: * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1868 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * SUSE Linux Micro 6.2 (noarch) * libX11-data-1.8.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:32:16 -0000 Subject: SUSE-SU-2026:24117-1: important: Security update for librsvg Message-ID: <179188033640.4437.3350501493276735164@00920b2f2f09> # Security update for librsvg Announcement ID: SUSE-SU-2026:24117-1 Release Date: 2026-10-08T06:12:42Z Rating: important References: * bsc#1282612 Cross-References: * CVE-2026-96889 CVSS scores: * CVE-2026-96889 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96889 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96889 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: * CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: * Update to version 2.60.3: * Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. * The minimum supported Rust version (MSRV) is 1.89.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1864 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96889.html * https://bugzilla.suse.com/show_bug.cgi?id=1282612 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 08:32:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 08:32:24 -0000 Subject: SUSE-SU-2026:24116-1: important: Security update for gcc13 Message-ID: <179188034452.4437.3663337363499819257@00920b2f2f09> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24116-1 Release Date: 2026-10-09T21:01:41Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1896 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * gcc13-PIE-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-160000.1.1 * gcc13-c++-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debugsource-13.5.0+git10516-160000.1.1 * gcc13-c++-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:30:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 12:30:10 -0000 Subject: SUSE-SU-2026:4637-1: important: Security update for gcc48 Message-ID: <179189461085.10778.5186062612411792879@81803ed3a673> # Security update for gcc48 Announcement ID: SUSE-SU-2026:4637-1 Release Date: 2026-10-13T07:54:18Z Rating: important References: * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gcc48 fixes the following issue: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4637 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4637 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * gcc48-locale-4.8.5-31.32.1 * gcc48-debugsource-4.8.5-31.32.1 * gcc48-c++-4.8.5-31.32.1 * gcc48-c++-debuginfo-4.8.5-31.32.1 * gcc48-debuginfo-4.8.5-31.32.1 * cpp48-4.8.5-31.32.1 * gcc48-4.8.5-31.32.1 * libstdc++48-devel-4.8.5-31.32.1 * cpp48-debuginfo-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * gcc48-32bit-4.8.5-31.32.1 * libstdc++48-devel-32bit-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * gcc48-info-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * libasan0-4.8.5-31.32.1 * libasan0-debuginfo-4.8.5-31.32.1 * libasan0-32bit-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * gcc48-locale-4.8.5-31.32.1 * libstdc++48-devel-32bit-4.8.5-31.32.1 * gcc48-debugsource-4.8.5-31.32.1 * gcc48-c++-4.8.5-31.32.1 * libasan0-4.8.5-31.32.1 * gcc48-32bit-4.8.5-31.32.1 * gcc48-c++-debuginfo-4.8.5-31.32.1 * gcc48-debuginfo-4.8.5-31.32.1 * cpp48-4.8.5-31.32.1 * libasan0-32bit-4.8.5-31.32.1 * gcc48-4.8.5-31.32.1 * libstdc++48-devel-4.8.5-31.32.1 * cpp48-debuginfo-4.8.5-31.32.1 * libasan0-debuginfo-4.8.5-31.32.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * gcc48-info-4.8.5-31.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:30:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 12:30:45 -0000 Subject: SUSE-SU-2026:4636-1: important: Security update for xorg-x11-server Message-ID: <179189464565.10778.9373219265484955085@81803ed3a673> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4636-1 Release Date: 2026-10-13T07:43:13Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4636 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4636 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debuginfo-1.19.6-10.108.1 * xorg-x11-server-1.19.6-10.108.1 * xorg-x11-server-extra-debuginfo-1.19.6-10.108.1 * xorg-x11-server-debugsource-1.19.6-10.108.1 * xorg-x11-server-extra-1.19.6-10.108.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * xorg-x11-server-debuginfo-1.19.6-10.108.1 * xorg-x11-server-1.19.6-10.108.1 * xorg-x11-server-extra-debuginfo-1.19.6-10.108.1 * xorg-x11-server-debugsource-1.19.6-10.108.1 * xorg-x11-server-extra-1.19.6-10.108.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:31:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 12:31:00 -0000 Subject: SUSE-SU-2026:4635-1: important: Security update for bind Message-ID: <179189466048.10778.17562411981583595046@81803ed3a673> # Security update for bind Announcement ID: SUSE-SU-2026:4635-1 Release Date: 2026-10-13T07:42:58Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280437 * bsc#1280438 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4635 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4635 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libisccc161-9.11.22-3.77.1 * libirs161-9.11.22-3.77.1 * libisc1107-debuginfo-9.11.22-3.77.1 * liblwres161-9.11.22-3.77.1 * bind-chrootenv-9.11.22-3.77.1 * libirs161-debuginfo-9.11.22-3.77.1 * bind-debuginfo-9.11.22-3.77.1 * bind-9.11.22-3.77.1 * bind-utils-debuginfo-9.11.22-3.77.1 * libisccfg163-debuginfo-9.11.22-3.77.1 * libdns1110-debuginfo-9.11.22-3.77.1 * libisccc161-debuginfo-9.11.22-3.77.1 * bind-utils-9.11.22-3.77.1 * libdns1110-9.11.22-3.77.1 * libbind9-161-debuginfo-9.11.22-3.77.1 * libbind9-161-9.11.22-3.77.1 * bind-devel-9.11.22-3.77.1 * libisccfg163-9.11.22-3.77.1 * bind-debugsource-9.11.22-3.77.1 * liblwres161-debuginfo-9.11.22-3.77.1 * libisc1107-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * bind-doc-9.11.22-3.77.1 * python-bind-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libisc1107-32bit-9.11.22-3.77.1 * libisc1107-debuginfo-32bit-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libisccc161-9.11.22-3.77.1 * libirs161-9.11.22-3.77.1 * libisc1107-debuginfo-9.11.22-3.77.1 * liblwres161-9.11.22-3.77.1 * bind-chrootenv-9.11.22-3.77.1 * libirs161-debuginfo-9.11.22-3.77.1 * bind-debuginfo-9.11.22-3.77.1 * bind-9.11.22-3.77.1 * bind-utils-debuginfo-9.11.22-3.77.1 * libisccfg163-debuginfo-9.11.22-3.77.1 * libdns1110-debuginfo-9.11.22-3.77.1 * libisccc161-debuginfo-9.11.22-3.77.1 * bind-utils-9.11.22-3.77.1 * libdns1110-9.11.22-3.77.1 * libbind9-161-debuginfo-9.11.22-3.77.1 * libbind9-161-9.11.22-3.77.1 * bind-devel-9.11.22-3.77.1 * libisccfg163-9.11.22-3.77.1 * bind-debugsource-9.11.22-3.77.1 * libisc1107-32bit-9.11.22-3.77.1 * liblwres161-debuginfo-9.11.22-3.77.1 * libisc1107-debuginfo-32bit-9.11.22-3.77.1 * libisc1107-9.11.22-3.77.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * bind-doc-9.11.22-3.77.1 * python-bind-9.11.22-3.77.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 12:31:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 12:31:16 -0000 Subject: SUSE-SU-2026:4633-1: moderate: Security update for python Message-ID: <179189467632.10778.1693079742997845086@81803ed3a673> # Security update for python Announcement ID: SUSE-SU-2026:4633-1 Release Date: 2026-10-13T07:42:32Z Rating: moderate References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 Cross-References: * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-6879 * CVE-2026-9669 CVSS scores: * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves six vulnerabilities and has one security fix can now be installed. ## Description: This update for python fixes the following issues: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and retu (bsc#1276227). Changes for python: * Update bundled setuptools wheels to setuptools-40.6.2-py2.py3-none-any.whl (bsc#1276903) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4633 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython2_7-1_0-2.7.18-33.88.1 * python-tk-debuginfo-2.7.18-33.88.1 * python-idle-2.7.18-33.88.1 * python-debugsource-2.7.18-33.88.1 * python-devel-2.7.18-33.88.1 * python-gdbm-debuginfo-2.7.18-33.88.1 * python-32bit-2.7.18-33.88.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.88.1 * python-curses-2.7.18-33.88.1 * python-demo-2.7.18-33.88.1 * python-curses-debuginfo-2.7.18-33.88.1 * python-base-debuginfo-2.7.18-33.88.1 * python-debuginfo-2.7.18-33.88.1 * python-xml-debuginfo-2.7.18-33.88.1 * python-xml-2.7.18-33.88.1 * python-base-2.7.18-33.88.1 * python-tk-2.7.18-33.88.1 * python-base-debugsource-2.7.18-33.88.1 * python-base-32bit-2.7.18-33.88.1 * python-2.7.18-33.88.1 * python-debuginfo-32bit-2.7.18-33.88.1 * python-gdbm-2.7.18-33.88.1 * python-base-debuginfo-32bit-2.7.18-33.88.1 * libpython2_7-1_0-32bit-2.7.18-33.88.1 * libpython2_7-1_0-debuginfo-2.7.18-33.88.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-doc-pdf-2.7.18-33.88.1 * python-doc-2.7.18-33.88.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 16:41:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 16:41:35 -0000 Subject: SUSE-SU-2026:4640-1: important: Security update for the Linux Kernel Message-ID: <179190969500.28273.10622274305650477031@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4640-1 Release Date: 2026-10-13T11:52:07Z Rating: important References: * bsc#1222538 * bsc#1250951 * bsc#1254408 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267882 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1272971 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273320 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274824 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274900 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275137 * bsc#1275142 * bsc#1275238 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275680 * bsc#1275681 * bsc#1275682 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275801 * bsc#1275802 * bsc#1275804 * bsc#1275812 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275956 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276471 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276852 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1276947 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277153 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277234 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277407 * bsc#1277410 * bsc#1277451 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277535 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277773 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277845 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278709 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279590 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280239 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280309 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280927 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283121 * bsc#1283130 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283489 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16968 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23352 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63987 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68128 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68258 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68395 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72018 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72125 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72147 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72337 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-72491 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74286 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74440 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74513 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74533 * CVE-2026-74534 * CVE-2026-74535 * CVE-2026-74536 * CVE-2026-74538 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74551 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74665 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80721 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80947 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90047 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98030 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63987 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63987 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63987 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68128 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68128 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-68128 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68395 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72337 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74286 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74534 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74535 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74535 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74665 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74665 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80721 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80947 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90047 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90047 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Real Time Module 15-SP7 An update that solves 508 vulnerabilities, contains seven features and has 20 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804). * CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). * CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). * ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: bound firmware ID by TLV length (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git- fixes). * Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git- fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix race condition during device registration (git- fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git- fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). * EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968). * EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: core: fix adapter registration race (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: s390: pci: Fix aisb calculation (bsc#1277451). * KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451). * KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451). * KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451). * KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451). * KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451). * KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451). * KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451). * KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451). * KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git- fixes). * media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852). * net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852). * net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852). * net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * nvme-tcp: fix usage of page_frag_cache (bsc#1267882). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (git-fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * USB: make to_usb_driver() use container_of_const() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mce: Add support for physical address valid bit (jsc#PED-16968). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951). * x86/tsx: Make tsx_ctrl_state static (bsc#1250951). * xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709). * xhci: fix lost bounce buffers on TDs spanning several ring segments (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4640 * SUSE Real Time Module 15-SP7 zypper in -t patch SUSE-SLE-Module-RT-15-SP7-2026-4640 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_78-rt-debuginfo-1-150700.1.3.1 * kernel-livepatch-6_4_0-150700_7_78-rt-1-150700.1.3.1 * kernel-livepatch-SLE15-SP7-RT_Update_21-debugsource-1-150700.1.3.1 * SUSE Real Time Module 15-SP7 (x86_64) * ocfs2-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * cluster-md-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-devel-debuginfo-6.4.0-150700.7.78.1 * kernel-rt-devel-6.4.0-150700.7.78.1 * dlm-kmp-rt-6.4.0-150700.7.78.1 * kernel-syms-rt-6.4.0-150700.7.78.1 * kernel-rt-debugsource-6.4.0-150700.7.78.1 * cluster-md-kmp-rt-6.4.0-150700.7.78.1 * dlm-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * gfs2-kmp-rt-6.4.0-150700.7.78.1 * gfs2-kmp-rt-debuginfo-6.4.0-150700.7.78.1 * ocfs2-kmp-rt-6.4.0-150700.7.78.1 * SUSE Real Time Module 15-SP7 (noarch) * kernel-source-rt-6.4.0-150700.7.78.1 * kernel-devel-rt-6.4.0-150700.7.78.1 * SUSE Real Time Module 15-SP7 (nosrc x86_64) * kernel-rt-6.4.0-150700.7.78.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63987.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68128.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68395.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72125.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72337.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74286.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74513.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74533.html * https://www.suse.com/security/cve/CVE-2026-74534.html * https://www.suse.com/security/cve/CVE-2026-74535.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74551.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74665.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80721.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80947.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90047.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1250951 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267882 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1272971 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274900 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275238 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275680 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275801 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275804 * https://bugzilla.suse.com/show_bug.cgi?id=1275812 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275956 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276471 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277407 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277451 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277535 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277773 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277845 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278709 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280239 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280927 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16968 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 16:42:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 16:42:07 -0000 Subject: SUSE-SU-2026:4639-1: important: Security update for the Linux Kernel Message-ID: <179190972787.28273.448259903514753751@35d72aa18c5b> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4639-1 Release Date: 2026-10-13T11:51:50Z Rating: important References: * bsc#1273290 * bsc#1274037 * bsc#1274836 * bsc#1275535 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276007 * bsc#1276381 * bsc#1277493 * bsc#1277766 * bsc#1277908 * bsc#1278191 * bsc#1278253 * bsc#1278310 * bsc#1278315 * bsc#1279619 * bsc#1280786 * bsc#1281397 * bsc#1281546 * jsc#PED-16892 * jsc#PED-17000 Cross-References: * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-72083 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72348 * CVE-2026-72398 * CVE-2026-74388 * CVE-2026-74556 * CVE-2026-74588 * CVE-2026-74597 * CVE-2026-74630 * CVE-2026-74641 * CVE-2026-74743 * CVE-2026-74752 * CVE-2026-80785 * CVE-2026-89479 * CVE-2026-90088 * CVE-2026-90104 CVSS scores: * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74641 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves 20 vulnerabilities and contains two features can now be installed. ## Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). * CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). The following non security issue was fixed: * Disable BATMAN in supported.conf * Disable CONFIG_BATMAN_ADV (jsc#PED-16892) * Disable CONFIG_CAN (jsc#PED-17000) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4639 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (nosrc x86_64) * kernel-xen-3.0.101-108.223.1 * kernel-ec2-3.0.101-108.223.1 * kernel-default-3.0.101-108.223.1 * kernel-trace-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * kernel-xen-base-3.0.101-108.223.1 * kernel-default-debugsource-3.0.101-108.223.1 * kernel-xen-devel-debuginfo-3.0.101-108.223.1 * kernel-xen-debuginfo-3.0.101-108.223.1 * kernel-default-devel-3.0.101-108.223.1 * kernel-trace-devel-debuginfo-3.0.101-108.223.1 * kernel-default-debuginfo-3.0.101-108.223.1 * kernel-syms-3.0.101-108.223.1 * kernel-trace-debugsource-3.0.101-108.223.1 * kernel-ec2-devel-3.0.101-108.223.1 * kernel-trace-base-3.0.101-108.223.1 * kernel-default-base-3.0.101-108.223.1 * kernel-default-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-debugsource-3.0.101-108.223.1 * kernel-ec2-debuginfo-3.0.101-108.223.1 * kernel-trace-debuginfo-3.0.101-108.223.1 * kernel-source-3.0.101-108.223.1 * kernel-xen-debugsource-3.0.101-108.223.1 * kernel-trace-devel-3.0.101-108.223.1 * kernel-ec2-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-base-3.0.101-108.223.1 * kernel-xen-devel-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch nosrc) * kernel-docs-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) * kernel-xen-3.0.101-108.223.1 * kernel-ec2-3.0.101-108.223.1 * kernel-default-3.0.101-108.223.1 * kernel-trace-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * kernel-xen-base-3.0.101-108.223.1 * kernel-default-debugsource-3.0.101-108.223.1 * kernel-xen-devel-debuginfo-3.0.101-108.223.1 * kernel-xen-debuginfo-3.0.101-108.223.1 * kernel-default-devel-3.0.101-108.223.1 * kernel-trace-devel-debuginfo-3.0.101-108.223.1 * kernel-default-debuginfo-3.0.101-108.223.1 * kernel-syms-3.0.101-108.223.1 * kernel-trace-debugsource-3.0.101-108.223.1 * kernel-ec2-devel-3.0.101-108.223.1 * kernel-trace-base-3.0.101-108.223.1 * kernel-default-base-3.0.101-108.223.1 * kernel-default-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-debugsource-3.0.101-108.223.1 * kernel-ec2-debuginfo-3.0.101-108.223.1 * kernel-trace-debuginfo-3.0.101-108.223.1 * kernel-source-3.0.101-108.223.1 * kernel-xen-debugsource-3.0.101-108.223.1 * kernel-trace-devel-3.0.101-108.223.1 * kernel-ec2-devel-debuginfo-3.0.101-108.223.1 * kernel-ec2-base-3.0.101-108.223.1 * kernel-xen-devel-3.0.101-108.223.1 * SUSE Linux Enterprise Server 11 SP4 (noarch nosrc) * kernel-docs-3.0.101-108.223.1 ## References: * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74641.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278310 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-17000 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:30:25 -0000 Subject: SUSE-SU-2026:24140-1: moderate: Security update for openssh Message-ID: <179192342538.5627.9201567363198613858@d580628b9e86> # Security update for openssh Announcement ID: SUSE-SU-2026:24140-1 Release Date: 2026-10-12T08:19:25Z Rating: moderate References: * bsc#1259462 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-929 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * openssh-clients-9.6p1-159998.1.1 * openssh-9.6p1-159998.1.1 * openssh-common-9.6p1-159998.1.1 * openssh-server-debuginfo-9.6p1-159998.1.1 * openssh-server-9.6p1-159998.1.1 * openssh-debuginfo-9.6p1-159998.1.1 * openssh-common-debuginfo-9.6p1-159998.1.1 * openssh-clients-debuginfo-9.6p1-159998.1.1 * openssh-server-config-rootlogin-9.6p1-159998.1.1 * openssh-fips-9.6p1-159998.1.1 * openssh-debugsource-9.6p1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:30:35 -0000 Subject: SUSE-SU-2026:24139-1: moderate: Security update for python-oauthlib Message-ID: <179192343552.5627.9767647259419831241@d580628b9e86> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24139-1 Release Date: 2026-10-12T08:19:25Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-928 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python311-oauthlib-3.2.2-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:30:42 -0000 Subject: SUSE-SU-2026:24138-1: moderate: Security update for python311 Message-ID: <179192344250.5627.10849581546356406732@d580628b9e86> # Security update for python311 Announcement ID: SUSE-SU-2026:24138-1 Release Date: 2026-10-10T17:03:03Z Rating: moderate References: * bsc#1276227 * bsc#1277111 Cross-References: * CVE-2026-15310 * CVE-2026-19672 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-924 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * python311-curses-debuginfo-3.11.16-159998.1.1 * python311-base-3.11.16-159998.1.1 * python311-debuginfo-3.11.16-159998.1.1 * python311-curses-3.11.16-159998.1.1 * python311-core-debugsource-3.11.16-159998.1.1 * python311-debugsource-3.11.16-159998.1.1 * libpython3_11-1_0-debuginfo-3.11.16-159998.1.1 * python311-base-debuginfo-3.11.16-159998.1.1 * python311-3.11.16-159998.1.1 * libpython3_11-1_0-3.11.16-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:30:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:30:55 -0000 Subject: SUSE-SU-2026:24137-1: important: Security update for busybox Message-ID: <179192345531.5627.1592105829434573086@d580628b9e86> # Security update for busybox Announcement ID: SUSE-SU-2026:24137-1 Release Date: 2026-10-10T16:38:09Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-926 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * busybox-1.36.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:00 -0000 Subject: SUSE-SU-2026:24136-1: important: Security update for containerd Message-ID: <179192346085.5627.11292041678258072526@d580628b9e86> # Security update for containerd Announcement ID: SUSE-SU-2026:24136-1 Release Date: 2026-10-10T16:35:20Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-33186 * CVE-2026-33814 * CVE-2026-34986 * CVE-2026-35469 * CVE-2026-39821 * CVE-2026-53488 CVSS scores: * CVE-2026-33186 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-33186 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33186 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35469 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-35469 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35469 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35469 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-925 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * containerd-1.7.29-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33186.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-34986.html * https://www.suse.com/security/cve/CVE-2026-35469.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:16 -0000 Subject: SUSE-SU-2026:24135-1: important: Security update for unbound Message-ID: <179192347639.5627.10247100129848196084@d580628b9e86> # Security update for unbound Announcement ID: SUSE-SU-2026:24135-1 Release Date: 2026-10-09T11:53:45Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-921 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libunbound8-debuginfo-1.26.1-159998.1.1 * unbound-anchor-1.26.1-159998.1.1 * unbound-anchor-debuginfo-1.26.1-159998.1.1 * libunbound8-1.26.1-159998.1.1 * unbound-debugsource-1.26.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:31 -0000 Subject: SUSE-SU-2026:24134-1: important: Security update for python-PyJWT Message-ID: <179192349139.5627.6742272175428316220@d580628b9e86> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24134-1 Release Date: 2026-10-09T11:52:25Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-922 ## Package List: * SUSE Linux Micro 6.0 (noarch) * python311-PyJWT-2.9.0-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:43 -0000 Subject: SUSE-SU-2026:24133-1: important: Security update for openssl-3 Message-ID: <179192350308.5627.1146629835936692805@d580628b9e86> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24133-1 Release Date: 2026-10-09T11:51:43Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 Cross-References: * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-923 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libopenssl3-debuginfo-3.1.4-159998.1.1 * libopenssl-3-fips-provider-3.1.4-159998.1.1 * openssl-3-debuginfo-3.1.4-159998.1.1 * libopenssl-3-devel-3.1.4-159998.1.1 * openssl-3-3.1.4-159998.1.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-159998.1.1 * openssl-3-debugsource-3.1.4-159998.1.1 * libopenssl3-3.1.4-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:48 -0000 Subject: SUSE-SU-2026:24132-1: important: Security update for wpa_supplicant Message-ID: <179192350831.5627.7953701805692031357@d580628b9e86> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24132-1 Release Date: 2026-10-09T07:36:36Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). * Fix incomplete RADIUS Message-Authenticator attribute validation in hostapd ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-919 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * wpa_supplicant-2.10-159998.1.1 * wpa_supplicant-debuginfo-2.10-159998.1.1 * wpa_supplicant-debugsource-2.10-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:31:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:31:53 -0000 Subject: SUSE-SU-2026:24131-1: important: Security update for google-osconfig-agent Message-ID: <179192351385.5627.16329607395025611757@d580628b9e86> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24131-1 Release Date: 2026-10-09T07:36:36Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-918 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * google-osconfig-agent-debuginfo-20260928.01-159998.1.1 * google-osconfig-agent-20260928.01-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:32:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:32:12 -0000 Subject: SUSE-SU-2026:4642-1: important: Security update for xen Message-ID: <179192353240.5627.14468937798957506626@d580628b9e86> # Security update for xen Announcement ID: SUSE-SU-2026:4642-1 Release Date: 2026-10-13T13:09:35Z Rating: important References: * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4642 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4642 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4642 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4642 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4642 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4642 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4642 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4642 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4642 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (x86_64) * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-libs-32bit-debuginfo-4.16.7_16-150400.4.95.1 * xen-doc-html-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-32bit-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (i586 x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * xen-libs-4.16.7_16-150400.4.95.1 * xen-tools-domU-debuginfo-4.16.7_16-150400.4.95.1 * xen-tools-domU-4.16.7_16-150400.4.95.1 * xen-4.16.7_16-150400.4.95.1 * xen-tools-4.16.7_16-150400.4.95.1 * xen-tools-debuginfo-4.16.7_16-150400.4.95.1 * xen-libs-debuginfo-4.16.7_16-150400.4.95.1 * xen-debugsource-4.16.7_16-150400.4.95.1 * xen-devel-4.16.7_16-150400.4.95.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.16.7_16-150400.4.95.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 13 20:32:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 13 Oct 2026 20:32:23 -0000 Subject: SUSE-SU-2026:4641-1: important: Security update for xen Message-ID: <179192354348.5627.8945398348208039404@d580628b9e86> # Security update for xen Announcement ID: SUSE-SU-2026:4641-1 Release Date: 2026-10-13T13:09:07Z Rating: important References: * bsc#1027519 * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities and has one security fix can now be installed. ## Description: This update for xen fixes the following issues: Security issues fixed: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). Non security issue fixed: * Xen: Missing upstream bug fixes (bsc#1027519). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4641 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4641 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4641 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4641 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4641 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4641 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-libs-32bit-debuginfo-4.17.7_02-150500.3.82.1 * xen-doc-html-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (i586 x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * xen-libs-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-4.17.7_02-150500.3.82.1 * xen-devel-4.17.7_02-150500.3.82.1 * xen-4.17.7_02-150500.3.82.1 * xen-tools-debuginfo-4.17.7_02-150500.3.82.1 * xen-tools-domU-debuginfo-4.17.7_02-150500.3.82.1 * xen-debugsource-4.17.7_02-150500.3.82.1 * xen-libs-4.17.7_02-150500.3.82.1 * xen-tools-4.17.7_02-150500.3.82.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.17.7_02-150500.3.82.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1027519 * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:31:45 -0000 Subject: SUSE-SU-2026:24141-1: moderate: Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Message-ID: <179196670518.6256.9432757761510718@d580628b9e86> # Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server Announcement ID: SUSE-SU-2026:24141-1 Release Date: 2026-10-13T15:11:56Z Rating: moderate References: * bsc#1208800 * bsc#1230568 * bsc#1230949 * bsc#1252286 * bsc#1257151 * bsc#1258382 * bsc#1258500 * bsc#1258567 * bsc#1259225 * bsc#1260342 * bsc#1262157 * bsc#1263822 * bsc#1265219 * bsc#1265472 * bsc#1266481 * bsc#1267261 * bsc#1267871 * bsc#1267912 * bsc#1268228 * bsc#1268325 * bsc#1268473 * bsc#1268587 * bsc#1268673 * bsc#1268755 * bsc#1269192 * bsc#1269253 * bsc#1269316 * bsc#1269534 * bsc#1269679 * bsc#1270033 * bsc#1270039 * bsc#1270040 * bsc#1270047 * bsc#1270141 * bsc#1270694 * bsc#1271075 * bsc#1271116 * bsc#1271124 * bsc#1271329 * bsc#1271332 * bsc#1271382 * bsc#1271467 * bsc#1271523 * bsc#1271678 * bsc#1271681 * bsc#1271841 * bsc#1271902 * bsc#1271963 * bsc#1272298 * bsc#1272392 * bsc#1272404 * bsc#1272538 * bsc#1272621 * bsc#1272988 * bsc#1273073 * bsc#1273131 * bsc#1273144 * bsc#1273846 * bsc#1273853 * bsc#1274023 * bsc#1274227 * bsc#1274613 * bsc#1274720 * bsc#1274775 * jsc#MSQA-1060 Cross-References: * CVE-2026-39821 * CVE-2026-63007 * CVE-2026-63009 * CVE-2026-71400 CVSS scores: * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-71400 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-71400 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 * SUSE Multi-Linux Manager Proxy 5.2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 * SUSE Multi-Linux Manager Server 5.2 An update that solves four vulnerabilities, contains one feature and has 60 fixes can now be installed. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Security update 5.2.1 for Multi-Linux Manager Server, Proxy and Retail Branch Server ### Description: This update fixes the following issues: proxy-httpd-image: * Version 5.2.10 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-salt-broker-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-squid-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-ssh-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 proxy-tftpd-image: * Version 5.2.10 * Use custom entry id for grub saltboot entries (bsc#1258382, bsc#1208800) * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 * Updated to version 5.2.10 server-attestation-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-database-migration-image: * Version 5.2.6 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-hub-xmlrpc-api-image: * Version 5.2.9 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 server-image: * Version 5.2.15 * Increase start-period (bsc#1271124) * Check disk space on startup * Use correct healthcheck cmd (bsc#1273144) * Detect an existing cgroup2 mount by filesystem type, not mountpoint. server-postgresql-image: * Version 5.2.13 * Automatically set the log timezone for TZ env (bsc#1267871) * Increase start-period and timeout (bsc#1271124) * Check disk space on startup server-saline-image: * Version 5.2.11 * Image rebuilt to the newest version with updated dependencies for SUSE Multi-Linux Manager 5.2.1 uyuni-tools: * CVE-2026-39821: Drop the direct dependency on golang.org/x/net (bsc#1266481) * Version 5.2.17-0 * Bump the default image tag to 5.2.1 * Reload systemd daemon before restarting services (bsc#1270033) * Check all supported locations for CA file in rotation check script * Detect and fix legacy service file (bsc#1268755) * Use healthcheck cmd from the image (bsc#1273144) The following packages are underlying build dependencies and system components used by the containers: apache-commons-fileupload2: * Updated to version 2.0.0-M5 * Add AbstractFileUpload support for a maximum part header size * FILEUPLOAD-367: Jakarta and Javax ServletFileUpload .isMultipartContent(HttpServletRequest) should allow PUT and PATCH request methods in addition to POST * FILEUPLOAD-367: Add AbstractFileUpload .isMultipartRequestMethod(String) * FILEUPLOAD-295: Clarified the precise meaning of isInMemory(), get(), getPath(), etc. in DiskFileItem * Better exception type and message if a multipart/mixed part is presented without a boundary defined * Bump org.apache.commons:commons-parent from 84 to 96 * Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 * Bump commons-io:commons-io from 2.19.0 to 2.21.0 byte-buddy: * Updated to version 1.18.8 * Introduce new versioning concept with -jdk5 suffix for backwards-compatible jar and Java 8 baseline for regular jar * Eagerly resolve of canonical files during attach emulation to avoid failure when process ends before file can be deleted * Add super classes to hash code / equals computation in Advice that were missing * Add support for new build description in Android 9 mgr-push: * Version 5.2.5-0 * Remove token based authentication mechanism for package_push (bsc#1230949) objectweb-asm: * Updated to version 9.10.1 * New Opcodes.V27 constant for Java 27 python-susemanager-retail: * Version 1.2.1 * Fix issue building package on SLES 16.0 salt: * Switch apache2ctl to apachectl for SUSE OSes (bsc#1252286) * Support attrlist in ldap.managed (bsc#1257151) * Use AsyncHTTPClient in salt.utils.http (bsc#1268325) * Decode binary pillars for salt-ssh to avoid exceptions (bsc#1263822) spacecmd: * Version 5.2.10-0 * Pre-filter errata in system_applyerrata to avoid using API calls for all existing errata (bsc#1267261) spacewalk-backend: * Version 5.2.10-0 * Allow diskcheck env vars into containers (bsc#1270033) * Use sha256 as the default checksum type for Debian repositories * Remove token based authentication mechanism for package_push (bsc#1230949) * Fix gpgverify signature file check for file object (bsc#1273131) * Allow using spacewalk-diskcheck without running service * Increase errata advisory char limit to 150 (bsc#1273846) * Use cryptographically secure random generation for secrets (bsc#1230568) spacewalk-branding: * Version 5.2.7-0 * No customer facing changes spacewalk-client-tools: * Version 5.2.7-0 * Update translation strings spacewalk-config: * Version 5.2.5-0 * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) spacewalk-java: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.21-0 * CVE-2026-63007: Check access rights on two formula API calls (bsc#1269253) - fixed in 5.2.20-0 * CVE-2026-63009: Sanitize uploaded image name (bsc#1269534) - fixed in 5.2.20-0 * Updated to version 5.2.22-0 * Restored the original reset behavior in isDryRun() by swapping subscribedChannels and unsubscribedChannels back (bsc#1271681) * Fix mainframe foreign systems showing wrong OS (bsc#1260342) * Make setting of column filters in ListTag idempotent (bsc#1269192) * Fix hubsync package download checksum lookup (bsc#1270040) * Many to many relationships should not cascade deletion (bsc#1272392) * Optimized channel model generation logic to improve page load performance during peripheral channel selection (bsc#1259225) * Fixed Hibernate issue when updating the SSL content sources during a pay-as- you-go connection data refresh (bsc#1271382) * Allow diskcheck env vars into containers (bsc#1270033) * Query only systems for virtual machines which are flagged as virtualization hosts (bsc#1273073) * Use Channel equality even for ClonedChannel (bsc#1272621) * Fix EOL notifications in containers * Fix config channel position gaps (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Prevent cascading package operations to checksums (bsc#1272392) * Fixed custom RBAC role names being incorrectly localized. (bsc#1271116) * Do not add FQDNs from proxy certificate (bsc#1270141, bsc#1272404) * Do not crash on conflicting FQDNs, add error message * Add delay to package clean to not interfere with repo-sync (bsc#1258500) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Wait for taskomatic before processing events (bsc#1265472) * Use the standard Bootstrap 5 row class in place of legacy layout classes. * Remove udevdb salt module leftovers, udev is used now * Fix Hibernate session crash on Errata Sync by dynamically loading default access groups from the active session (bsc#1272298) * Fix Profile tab display in system details menu (bsc#1271963) spacewalk-proxy: * CVE-2026-71400: Remove cobbler_api endpoint from public interface (bsc#1274613, bsc#1274775) - fixed in 5.2.6-0 * Version 5.2.5-0 * Remove salt dependency from spacewalk-proxy-salt package spacewalk-search: * Version 5.2.6-0 * No customer facing changes spacewalk-utils: * Version 5.2.8-0 * Taskotop now handles timezone (bsc#1267871) spacewalk-web: * Version 5.2.14-0 * Improve product selection checkboxes in the setup UI * Show partial selection state for product trees more accurately * Fixed the "Clear selected system set" button flickering during page navigation. (bsc#1271523) * Add web.version.eol setting to provide an end of life date * Fix duplicate remaining characters label in the Create Custom Info Key description field. (bsc#1269679) * Improve handling of invalid issue_date values when creating CLM filters via the API. (bsc#1271467) * Refactor checkboxes in the RBAC UI * Reuse common Check component * Use the standard Bootstrap 5 row class in place of legacy layout classes. struts: * Fix JakartaServletFileUpload as setFileSizeMax was renamed to setMaxFileSize * Use explicite same java version as spacewalk-java to get around "class file has wrong version" errors subscription-matcher: * Updated to version 0.47 * Added missing part numbers (bsc#1274227, bsc#1265219) * Fix unsupported part number (bsc#1271075) supportutils-plugin-susemanager: * Version 5.2.3-0 * Allow 100 connection difference for apache and tomcat * Fix reading connections from the correct source * Add reportdb connections to the database connection limit (bsc#1262157) susemanager: * Version 5.2.10-0 * Add Ubuntu 26.04 LTS susemanager-build-keys: * Update SUSE addon key - extended validity susemanager-docs_en: * Documented requirements and limitations for container image inspection on SLES 15 and SLES 16 (bsc#1274720) * Documented proxy certificate replacement using spacecmd (bsc#1271329) * Documented certificate setup and rotation with unified mgradm ssl rotate command * Documented allowing diskcheck environment variables into containers (bsc#1270033) * Clarified availability of Salt's "virt" module in the Salt Bundle (bsc#1270694) * Added instruction for obtaining the certificate when renaming the server (bsc#1273853) * Added a common workflow for certificate setup and rotation with ACME * Documented how VMs are listed and referenced by virtual hosts (bsc#1273073) * Added documentation support for Ubuntu 26.04 client systems * Added the missing TFTP image in airgap install command * Fixed procedures for OpenSCAP in Administration Guide (bsc#1270047) * Fixed the snippet to reflect the correct produst version (bsc#1272538) * Corrected verification step order in MLM 5.0 to 5.2 upgrade guide for SL- Micro (bsc#1271678) * Extended configuration instructions for Saline formula in Specialized Guides (bsc#1268587) * Enhanced instructions for Liberate formula and reactivation key in Specialized Guides (bsc#1268473) * Fixed missing line end escapes in kubernetes helm install commands * Consolidated multiple duplicated activation key creation procedures into a single reusable partial snippet * Fixed Traefik installation documentation in Specialized Guides * Clarified CA certificate migration requirements (bsc#1271841) * Added instructions for enabling reporting dashboards in Specialized Guides (bsc#1268228) * Remove legacy mgradm and mgrpxy commands * Added the --set tag parameter to helm install/upgrade commands as a workaround (bsc#1271902) * Documented apache2 parameter used for large deployments (bsc#1268673) * Documented Grafana reporting database automated setup and Hub Overview in Administration and Specialized Guides * Update the OpenSCAP packages table in the System Security with OpenSCAP article in the Administration guide (bsc#1269316) * Added documentation for migrating legacy ISS v1 and ISS v2 peripheral servers to ISS v3 (Hub Online Synchronization) and detailed Report DB/XMLRPC API dependencies in Specialized Guides * Documented SLES 15 SP7 to SLES 16.0 major upgrade via product migration in Client Configuration Guide susemanager-schema: * Version 5.2.14-0 * Updated tables for CoCo attestation restructuring * Use temp table for hidden packages (bsc#1267912) * Renumber config channel positions to close gaps left by deleting an assigned config channel (ON DELETE CASCADE did not compact the survivors), preventing multiple failures (bsc#1272988) * Separate Live-Patching Errata for SLE15 SP7 (bsc#1270039) * Increase advisory char limit to 150 in rhnErrata (bsc#1273846) * RBAC: add missing endpoints to 'systems.profiles' namespace (bsc#1271963) susemanager-sls: * Version 5.2.15-0 * Propagate cert validation errors to UI (bsc#1271332) * Fix cleanup timeout when deleting minions (bsc#1258567) * Fix salt deletion on SSH minions (bsc#1274023) * Set podman secrets for proxy directly from salt * Fix migration of jmx conf (bsc#1268755) * Remove unused udevdb salt module as upstream udev is used susemanager-sync-data: * Version 5.2.6-0 * Add Ubuntu 26.04 LTS uyuni-coco-attestation: * Version 5.2.7-0 * Ensure the certs directory is always created * Allow pvattest module to be built on s390x uyuni-java-common: * Version 5.2.7-0 * No customer facing changes uyuni-java-parent: * Version 5.2.7-0 * No customer facing changes How to apply this update: SUSE Multi-Linux Manager Server: 1. Log in as root user to the SUSE Multi-Linux Manager Server. 2. Upgrade mgradm and mgrctl. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgradm upgrade podman' which will use the default image tags. SUSE Multi-Linux Manager Proxy / Retail Branch Server: 1. Log in as root user to the SUSE Multi-Linux Manager Proxy / Retail Branch Server. 2. Upgrade mgrpxy. 3. If you are in a disconnected environment, upgrade the image packages. 4. Reboot the system. 5. Run 'mgrpxy upgrade podman' which will use the default image tags. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Multi-Linux Manager Proxy 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 * SUSE Multi-Linux Manager Retail Branch Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 * SUSE Multi-Linux Manager Server 5.2 zypper in -t patch SUSE-Multi-Linux-Manager-5.2-2 ## Package List: * SUSE Multi-Linux Manager Proxy 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Proxy 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Proxy 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Proxy 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrpxy-5.2.17-160000.1.1 * mgrpxy-debuginfo-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (noarch) * mgrpxy-bash-completion-5.2.17-160000.1.1 * mgrpxy-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-aarch64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-proxy-httpd-image-5.2.1-9.3.30 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-s390x-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Retail Branch Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-proxy-ssh-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-squid-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-proxy-httpd-image-5.2.1-9.3.30 * suse-multi-linux-manager-5.2-x86_64-proxy-salt-broker-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (aarch64 ppc64le s390x x86_64) * mgrctl-debuginfo-5.2.17-160000.1.1 * mgradm-5.2.17-160000.1.1 * mgradm-debuginfo-5.2.17-160000.1.1 * mgrctl-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (noarch) * mgrctl-zsh-completion-5.2.17-160000.1.1 * mgrctl-bash-completion-5.2.17-160000.1.1 * mgradm-bash-completion-5.2.17-160000.1.1 * mgradm-zsh-completion-5.2.17-160000.1.1 * SUSE Multi-Linux Manager Server 5.2 (aarch64) * suse-multi-linux-manager-5.2-aarch64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-aarch64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-aarch64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-aarch64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-aarch64-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-aarch64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-aarch64-server-database-migration-image-5.2.1-7.3.16 * SUSE Multi-Linux Manager Server 5.2 (ppc64le) * suse-multi-linux-manager-5.2-ppc64le-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-ppc64le-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-ppc64le-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-ppc64le-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-ppc64le-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-ppc64le-server-attestation-image-5.2.1-11.3.23 * SUSE Multi-Linux Manager Server 5.2 (s390x) * suse-multi-linux-manager-5.2-s390x-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-s390x-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-s390x-server-attestation-image-5.2.1-11.3.23 * suse-multi-linux-manager-5.2-s390x-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-s390x-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-s390x-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-s390x-proxy-tftpd-image-5.2.1-9.3.16 * SUSE Multi-Linux Manager Server 5.2 (x86_64) * suse-multi-linux-manager-5.2-x86_64-server-image-5.2.1-11.3.29 * suse-multi-linux-manager-5.2-x86_64-server-saline-image-5.2.1-11.3.24 * suse-multi-linux-manager-5.2-x86_64-server-postgresql-image-5.2.1-11.3.15 * suse-multi-linux-manager-5.2-x86_64-server-database-migration-image-5.2.1-7.3.16 * suse-multi-linux-manager-5.2-x86_64-server-hub-xmlrpc-api-image-5.2.1-9.3.19 * suse-multi-linux-manager-5.2-x86_64-proxy-tftpd-image-5.2.1-9.3.16 * suse-multi-linux-manager-5.2-x86_64-server-attestation-image-5.2.1-11.3.23 ## References: * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-63007.html * https://www.suse.com/security/cve/CVE-2026-63009.html * https://www.suse.com/security/cve/CVE-2026-71400.html * https://bugzilla.suse.com/show_bug.cgi?id=1208800 * https://bugzilla.suse.com/show_bug.cgi?id=1230568 * https://bugzilla.suse.com/show_bug.cgi?id=1230949 * https://bugzilla.suse.com/show_bug.cgi?id=1252286 * https://bugzilla.suse.com/show_bug.cgi?id=1257151 * https://bugzilla.suse.com/show_bug.cgi?id=1258382 * https://bugzilla.suse.com/show_bug.cgi?id=1258500 * https://bugzilla.suse.com/show_bug.cgi?id=1258567 * https://bugzilla.suse.com/show_bug.cgi?id=1259225 * https://bugzilla.suse.com/show_bug.cgi?id=1260342 * https://bugzilla.suse.com/show_bug.cgi?id=1262157 * https://bugzilla.suse.com/show_bug.cgi?id=1263822 * https://bugzilla.suse.com/show_bug.cgi?id=1265219 * https://bugzilla.suse.com/show_bug.cgi?id=1265472 * https://bugzilla.suse.com/show_bug.cgi?id=1266481 * https://bugzilla.suse.com/show_bug.cgi?id=1267261 * https://bugzilla.suse.com/show_bug.cgi?id=1267871 * https://bugzilla.suse.com/show_bug.cgi?id=1267912 * https://bugzilla.suse.com/show_bug.cgi?id=1268228 * https://bugzilla.suse.com/show_bug.cgi?id=1268325 * https://bugzilla.suse.com/show_bug.cgi?id=1268473 * https://bugzilla.suse.com/show_bug.cgi?id=1268587 * https://bugzilla.suse.com/show_bug.cgi?id=1268673 * https://bugzilla.suse.com/show_bug.cgi?id=1268755 * https://bugzilla.suse.com/show_bug.cgi?id=1269192 * https://bugzilla.suse.com/show_bug.cgi?id=1269253 * https://bugzilla.suse.com/show_bug.cgi?id=1269316 * https://bugzilla.suse.com/show_bug.cgi?id=1269534 * https://bugzilla.suse.com/show_bug.cgi?id=1269679 * https://bugzilla.suse.com/show_bug.cgi?id=1270033 * https://bugzilla.suse.com/show_bug.cgi?id=1270039 * https://bugzilla.suse.com/show_bug.cgi?id=1270040 * https://bugzilla.suse.com/show_bug.cgi?id=1270047 * https://bugzilla.suse.com/show_bug.cgi?id=1270141 * https://bugzilla.suse.com/show_bug.cgi?id=1270694 * https://bugzilla.suse.com/show_bug.cgi?id=1271075 * https://bugzilla.suse.com/show_bug.cgi?id=1271116 * https://bugzilla.suse.com/show_bug.cgi?id=1271124 * https://bugzilla.suse.com/show_bug.cgi?id=1271329 * https://bugzilla.suse.com/show_bug.cgi?id=1271332 * https://bugzilla.suse.com/show_bug.cgi?id=1271382 * https://bugzilla.suse.com/show_bug.cgi?id=1271467 * https://bugzilla.suse.com/show_bug.cgi?id=1271523 * https://bugzilla.suse.com/show_bug.cgi?id=1271678 * https://bugzilla.suse.com/show_bug.cgi?id=1271681 * https://bugzilla.suse.com/show_bug.cgi?id=1271841 * https://bugzilla.suse.com/show_bug.cgi?id=1271902 * https://bugzilla.suse.com/show_bug.cgi?id=1271963 * https://bugzilla.suse.com/show_bug.cgi?id=1272298 * https://bugzilla.suse.com/show_bug.cgi?id=1272392 * https://bugzilla.suse.com/show_bug.cgi?id=1272404 * https://bugzilla.suse.com/show_bug.cgi?id=1272538 * https://bugzilla.suse.com/show_bug.cgi?id=1272621 * https://bugzilla.suse.com/show_bug.cgi?id=1272988 * https://bugzilla.suse.com/show_bug.cgi?id=1273073 * https://bugzilla.suse.com/show_bug.cgi?id=1273131 * https://bugzilla.suse.com/show_bug.cgi?id=1273144 * https://bugzilla.suse.com/show_bug.cgi?id=1273846 * https://bugzilla.suse.com/show_bug.cgi?id=1273853 * https://bugzilla.suse.com/show_bug.cgi?id=1274023 * https://bugzilla.suse.com/show_bug.cgi?id=1274227 * https://bugzilla.suse.com/show_bug.cgi?id=1274613 * https://bugzilla.suse.com/show_bug.cgi?id=1274720 * https://bugzilla.suse.com/show_bug.cgi?id=1274775 * https://jira.suse.com/browse/MSQA-1060 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:31:52 -0000 Subject: SUSE-SU-2026:4654-1: important: Security update for glibc Message-ID: <179196671281.6256.13300244033119642601@d580628b9e86> # Security update for glibc Announcement ID: SUSE-SU-2026:4654-1 Release Date: 2026-10-13T16:56:09Z Rating: important References: * bsc#1282449 * bsc#1282509 Cross-References: * CVE-2026-86805 * CVE-2026-89092 CVSS scores: * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4654 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4654 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * nscd-2.22-114.55.1 * glibc-locale-2.22-114.55.1 * glibc-profile-2.22-114.55.1 * glibc-devel-2.22-114.55.1 * glibc-devel-debuginfo-2.22-114.55.1 * glibc-debuginfo-2.22-114.55.1 * glibc-locale-debuginfo-2.22-114.55.1 * nscd-debuginfo-2.22-114.55.1 * glibc-devel-static-2.22-114.55.1 * glibc-debugsource-2.22-114.55.1 * glibc-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * glibc-32bit-2.22-114.55.1 * glibc-devel-32bit-2.22-114.55.1 * glibc-locale-32bit-2.22-114.55.1 * glibc-profile-32bit-2.22-114.55.1 * glibc-devel-debuginfo-32bit-2.22-114.55.1 * glibc-locale-debuginfo-32bit-2.22-114.55.1 * glibc-debuginfo-32bit-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * glibc-i18ndata-2.22-114.55.1 * glibc-html-2.22-114.55.1 * glibc-info-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * nscd-2.22-114.55.1 * glibc-32bit-2.22-114.55.1 * glibc-devel-32bit-2.22-114.55.1 * glibc-locale-2.22-114.55.1 * glibc-locale-32bit-2.22-114.55.1 * glibc-profile-2.22-114.55.1 * glibc-devel-debuginfo-32bit-2.22-114.55.1 * glibc-devel-2.22-114.55.1 * glibc-devel-debuginfo-2.22-114.55.1 * glibc-debuginfo-2.22-114.55.1 * glibc-locale-debuginfo-2.22-114.55.1 * glibc-profile-32bit-2.22-114.55.1 * glibc-devel-static-2.22-114.55.1 * nscd-debuginfo-2.22-114.55.1 * glibc-debugsource-2.22-114.55.1 * glibc-locale-debuginfo-32bit-2.22-114.55.1 * glibc-debuginfo-32bit-2.22-114.55.1 * glibc-2.22-114.55.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * glibc-i18ndata-2.22-114.55.1 * glibc-html-2.22-114.55.1 * glibc-info-2.22-114.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:31:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:31:58 -0000 Subject: SUSE-SU-2026:4653-1: important: Security update for gimp Message-ID: <179196671839.6256.3132188526908931397@d580628b9e86> # Security update for gimp Announcement ID: SUSE-SU-2026:4653-1 Release Date: 2026-10-13T16:55:41Z Rating: important References: * bsc#1282596 Cross-References: * CVE-2026-97185 CVSS scores: * CVE-2026-97185 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97185 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for gimp fixes the following issue: * CVE-2026-97185: out-of-bounds write in GIMPressionist plugin via crafted preset file (bsc#1282596). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4653 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4653 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4653 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-debuginfo-2.10.30-150400.3.82.1 * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.82.1 * gimp-plugin-aa-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (x86_64) * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.82.1 * libgimpui-2_0-0-32bit-2.10.30-150400.3.82.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimpui-2_0-0-64bit-2.10.30-150400.3.82.1 * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.82.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-debuginfo-2.10.30-150400.3.82.1 * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * gimp-debuginfo-2.10.30-150400.3.82.1 * libgimpui-2_0-0-2.10.30-150400.3.82.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.82.1 * gimp-debugsource-2.10.30-150400.3.82.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.82.1 * libgimp-2_0-0-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-2.10.30-150400.3.82.1 * gimp-devel-debuginfo-2.10.30-150400.3.82.1 * gimp-devel-2.10.30-150400.3.82.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.82.1 * gimp-plugin-aa-2.10.30-150400.3.82.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.82.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97185.html * https://bugzilla.suse.com/show_bug.cgi?id=1282596 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:32:05 -0000 Subject: SUSE-SU-2026:4652-1: important: Security update for python-virtualenv Message-ID: <179196672546.6256.12542514364826135434@d580628b9e86> # Security update for python-virtualenv Announcement ID: SUSE-SU-2026:4652-1 Release Date: 2026-10-13T16:55:07Z Rating: important References: * bsc#1283890 * bsc#1283904 Cross-References: * CVE-2026-102930 * CVE-2026-102938 CVSS scores: * CVE-2026-102930 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102930 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-102930 ( NVD ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102938 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-102938 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-102938 ( NVD ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-virtualenv fixes the following issues: * CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). * CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4652 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4652 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4652 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4652 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4652 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4652 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4652 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4652 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4652 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4652 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4652 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4652 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * openSUSE Leap 15.4 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * Python 3 Module 15-SP7 (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-virtualenv-20.22.0-150400.9.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102930.html * https://www.suse.com/security/cve/CVE-2026-102938.html * https://bugzilla.suse.com/show_bug.cgi?id=1283890 * https://bugzilla.suse.com/show_bug.cgi?id=1283904 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:32:23 -0000 Subject: SUSE-SU-2026:4651-1: important: Security update for php8 Message-ID: <179196674329.6256.16313265512584017649@d580628b9e86> # Security update for php8 Announcement ID: SUSE-SU-2026:4651-1 Release Date: 2026-10-13T16:53:22Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4651 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4651 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4651 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4651 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4651 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4651 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4651 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4651 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4651 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php8-iconv-8.0.30-150400.4.76.1 * php8-bz2-debuginfo-8.0.30-150400.4.76.1 * php8-opcache-8.0.30-150400.4.76.1 * php8-calendar-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-8.0.30-150400.4.76.1 * php8-dba-8.0.30-150400.4.76.1 * php8-mbstring-8.0.30-150400.4.76.1 * php8-sockets-8.0.30-150400.4.76.1 * php8-xmlwriter-8.0.30-150400.4.76.1 * php8-pgsql-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-debuginfo-8.0.30-150400.4.76.1 * php8-exif-debuginfo-8.0.30-150400.4.76.1 * php8-openssl-8.0.30-150400.4.76.1 * php8-intl-8.0.30-150400.4.76.1 * php8-curl-debuginfo-8.0.30-150400.4.76.1 * php8-pdo-debuginfo-8.0.30-150400.4.76.1 * php8-posix-8.0.30-150400.4.76.1 * php8-snmp-debuginfo-8.0.30-150400.4.76.1 * php8-enchant-debuginfo-8.0.30-150400.4.76.1 * php8-gd-8.0.30-150400.4.76.1 * php8-sqlite-debuginfo-8.0.30-150400.4.76.1 * php8-sodium-debuginfo-8.0.30-150400.4.76.1 * php8-debugsource-8.0.30-150400.4.76.1 * php8-tidy-debuginfo-8.0.30-150400.4.76.1 * php8-embed-8.0.30-150400.4.76.1 * php8-odbc-8.0.30-150400.4.76.1 * php8-readline-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debuginfo-8.0.30-150400.4.76.1 * php8-xsl-debuginfo-8.0.30-150400.4.76.1 * php8-ctype-debuginfo-8.0.30-150400.4.76.1 * php8-mysql-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-debuginfo-8.0.30-150400.4.76.1 * php8-ldap-debuginfo-8.0.30-150400.4.76.1 * php8-zip-8.0.30-150400.4.76.1 * php8-fpm-debugsource-8.0.30-150400.4.76.1 * php8-sysvshm-8.0.30-150400.4.76.1 * php8-xsl-8.0.30-150400.4.76.1 * php8-fileinfo-8.0.30-150400.4.76.1 * php8-curl-8.0.30-150400.4.76.1 * php8-ldap-8.0.30-150400.4.76.1 * php8-phar-debuginfo-8.0.30-150400.4.76.1 * php8-bz2-8.0.30-150400.4.76.1 * php8-ctype-8.0.30-150400.4.76.1 * php8-fastcgi-debugsource-8.0.30-150400.4.76.1 * php8-dba-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.76.1 * php8-pcntl-debuginfo-8.0.30-150400.4.76.1 * php8-sysvsem-8.0.30-150400.4.76.1 * php8-shmop-8.0.30-150400.4.76.1 * php8-calendar-8.0.30-150400.4.76.1 * php8-fastcgi-8.0.30-150400.4.76.1 * php8-shmop-debuginfo-8.0.30-150400.4.76.1 * php8-cli-8.0.30-150400.4.76.1 * php8-phar-8.0.30-150400.4.76.1 * php8-mbstring-debuginfo-8.0.30-150400.4.76.1 * php8-readline-8.0.30-150400.4.76.1 * php8-snmp-8.0.30-150400.4.76.1 * php8-dom-8.0.30-150400.4.76.1 * php8-opcache-debuginfo-8.0.30-150400.4.76.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-8.0.30-150400.4.76.1 * php8-tidy-8.0.30-150400.4.76.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.76.1 * php8-sqlite-8.0.30-150400.4.76.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.76.1 * apache2-mod_php8-8.0.30-150400.4.76.1 * php8-ftp-debuginfo-8.0.30-150400.4.76.1 * php8-gmp-debuginfo-8.0.30-150400.4.76.1 * php8-zlib-8.0.30-150400.4.76.1 * php8-mysql-8.0.30-150400.4.76.1 * php8-devel-8.0.30-150400.4.76.1 * php8-bcmath-debuginfo-8.0.30-150400.4.76.1 * php8-dom-debuginfo-8.0.30-150400.4.76.1 * php8-cli-debuginfo-8.0.30-150400.4.76.1 * php8-gettext-debuginfo-8.0.30-150400.4.76.1 * php8-gd-debuginfo-8.0.30-150400.4.76.1 * php8-test-8.0.30-150400.4.76.2 * php8-exif-8.0.30-150400.4.76.1 * php8-gettext-8.0.30-150400.4.76.1 * php8-sysvmsg-8.0.30-150400.4.76.1 * php8-pgsql-8.0.30-150400.4.76.1 * php8-enchant-8.0.30-150400.4.76.1 * php8-debuginfo-8.0.30-150400.4.76.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.76.1 * php8-pcntl-8.0.30-150400.4.76.1 * php8-sockets-debuginfo-8.0.30-150400.4.76.1 * php8-soap-debuginfo-8.0.30-150400.4.76.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.76.1 * php8-8.0.30-150400.4.76.1 * php8-fpm-debuginfo-8.0.30-150400.4.76.1 * php8-posix-debuginfo-8.0.30-150400.4.76.1 * php8-xmlreader-8.0.30-150400.4.76.1 * php8-pdo-8.0.30-150400.4.76.1 * php8-fpm-8.0.30-150400.4.76.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.76.1 * php8-zip-debuginfo-8.0.30-150400.4.76.1 * php8-embed-debugsource-8.0.30-150400.4.76.1 * php8-soap-8.0.30-150400.4.76.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.76.1 * php8-iconv-debuginfo-8.0.30-150400.4.76.1 * php8-ftp-8.0.30-150400.4.76.1 * php8-bcmath-8.0.30-150400.4.76.1 * php8-gmp-8.0.30-150400.4.76.1 * php8-odbc-debuginfo-8.0.30-150400.4.76.1 * php8-intl-debuginfo-8.0.30-150400.4.76.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.76.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.76.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:32:30 -0000 Subject: SUSE-SU-2026:4650-1: important: Security update for python-urllib3 Message-ID: <179196675039.6256.2233205591773650575@d580628b9e86> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4650-1 Release Date: 2026-10-13T16:52:01Z Rating: important References: * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4650 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4650 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4650 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4650 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4650 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4650 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4650 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4650 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4650 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4650 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4650 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4650 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4650 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4650 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4650 ## Package List: * openSUSE Leap 15.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * Basesystem Module 15-SP7 (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python3-urllib3-1.25.10-150300.4.33.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:32:37 -0000 Subject: SUSE-SU-2026:4649-1: important: Security update for python-urllib3 Message-ID: <179196675747.6256.13695647283600161412@d580628b9e86> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4649-1 Release Date: 2026-10-13T16:49:54Z Rating: important References: * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 12 * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 12 zypper in -t patch SUSE-SLE-Module-Public-Cloud-12-2026-4649 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4649 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4649 ## Package List: * Public Cloud Module 12 (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-urllib3-1.25.10-3.54.1 * python3-urllib3-1.25.10-3.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:32:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:32:43 -0000 Subject: SUSE-SU-2026:4648-1: important: Security update for cups-filters Message-ID: <179196676306.6256.4506239409608883586@d580628b9e86> # Security update for cups-filters Announcement ID: SUSE-SU-2026:4648-1 Release Date: 2026-10-13T16:49:16Z Rating: important References: * bsc#1282291 Cross-References: * CVE-2026-95511 CVSS scores: * CVE-2026-95511 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-95511 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-95511 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cups-filters fixes the following issue: * CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4648 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4648 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-debuginfo-1.0.58-19.41.1 * cups-filters-foomatic-rip-debuginfo-1.0.58-19.41.1 * cups-filters-1.0.58-19.41.1 * cups-filters-foomatic-rip-1.0.58-19.41.1 * cups-filters-ghostscript-debuginfo-1.0.58-19.41.1 * cups-filters-debugsource-1.0.58-19.41.1 * cups-filters-ghostscript-1.0.58-19.41.1 * cups-filters-cups-browsed-1.0.58-19.41.1 * cups-filters-cups-browsed-debuginfo-1.0.58-19.41.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cups-filters-debuginfo-1.0.58-19.41.1 * cups-filters-foomatic-rip-debuginfo-1.0.58-19.41.1 * cups-filters-1.0.58-19.41.1 * cups-filters-foomatic-rip-1.0.58-19.41.1 * cups-filters-ghostscript-debuginfo-1.0.58-19.41.1 * cups-filters-debugsource-1.0.58-19.41.1 * cups-filters-ghostscript-1.0.58-19.41.1 * cups-filters-cups-browsed-1.0.58-19.41.1 * cups-filters-cups-browsed-debuginfo-1.0.58-19.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-95511.html * https://bugzilla.suse.com/show_bug.cgi?id=1282291 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:33:00 -0000 Subject: SUSE-SU-2026:4647-1: important: Security update for xorg-x11-server Message-ID: <179196678098.6256.4325914843262088824@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4647-1 Release Date: 2026-10-13T16:48:50Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4647 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4647 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4647 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-source-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-sdk-21.1.11-150600.5.34.1 * xorg-x11-server-extra-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-extra-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-Xvfb-21.1.11-150600.5.34.1 * xorg-x11-server-21.1.11-150600.5.34.1 * xorg-x11-server-debuginfo-21.1.11-150600.5.34.1 * xorg-x11-server-debugsource-21.1.11-150600.5.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:33:18 -0000 Subject: SUSE-SU-2026:4646-1: important: Security update for xorg-x11-server Message-ID: <179196679878.6256.5905853889041423639@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4646-1 Release Date: 2026-10-13T16:48:25Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4646 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4646 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.15-150700.5.25.1 * xorg-x11-server-extra-21.1.15-150700.5.25.1 * xorg-x11-server-Xvfb-21.1.15-150700.5.25.1 * xorg-x11-server-Xvfb-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-extra-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-debuginfo-21.1.15-150700.5.25.1 * xorg-x11-server-21.1.15-150700.5.25.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * xorg-x11-server-debugsource-21.1.15-150700.5.25.1 * xorg-x11-server-sdk-21.1.15-150700.5.25.1 * xorg-x11-server-debuginfo-21.1.15-150700.5.25.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 08:33:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 08:33:37 -0000 Subject: SUSE-SU-2026:4645-1: important: Security update for xorg-x11-server Message-ID: <179196681728.6256.11375662705850503719@d580628b9e86> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4645-1 Release Date: 2026-10-13T16:47:52Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4645 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4645 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4645 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4645 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4645 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-source-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-21.1.4-150500.7.55.1 * xorg-x11-server-Xvfb-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-21.1.4-150500.7.55.1 * xorg-x11-server-sdk-21.1.4-150500.7.55.1 * xorg-x11-server-debuginfo-21.1.4-150500.7.55.1 * xorg-x11-server-debugsource-21.1.4-150500.7.55.1 * xorg-x11-server-extra-21.1.4-150500.7.55.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 12:30:15 -0000 Subject: SUSE-SU-2026:4658-1: important: Security update for libtcnative-2-0 Message-ID: <179198101508.6676.13188500493079179890@929e079ff995> # Security update for libtcnative-2-0 Announcement ID: SUSE-SU-2026:4658-1 Release Date: 2026-10-14T07:51:19Z Rating: important References: * bsc#1282621 * bsc#1282622 * bsc#1282623 Cross-References: * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 CVSS scores: * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for libtcnative-2-0 fixes the following issues: * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). Changes for libtcnative-2-0: * Upgrade to version 2.0.16 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Update: Remove support for Windows build on IA64 architecture (Itanium) * Update: Make x64 the default architecture for Windows build * Update: Make Windows 10 / 11 the default target version for Windows builds * Fix: Fix a potential crash when negotiating ALPN * Fix: If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Fix: Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4658 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4658 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4658 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4658 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4658 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4658 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4658 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4658 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4658 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4658 * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4658 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4658 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4658 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libtcnative-2-0-devel-2.0.16-150400.9.6.1 * libtcnative-2-0-debuginfo-2.0.16-150400.9.6.1 * libtcnative-2-0-debugsource-2.0.16-150400.9.6.1 * libtcnative-2-0-2.0.16-150400.9.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 12:30:29 -0000 Subject: SUSE-SU-2026:4657-1: important: Security update for bind Message-ID: <179198102909.6676.14376715954240565037@929e079ff995> # Security update for bind Announcement ID: SUSE-SU-2026:4657-1 Release Date: 2026-10-14T07:49:41Z Rating: important References: * bsc#1280433 * bsc#1280435 * bsc#1280443 Cross-References: * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-80274 CVSS scores: * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4657 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4657 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4657 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4657 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libns1604-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * bind-utils-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * bind-9.16.6-150300.22.65.1 * libbind9-1600-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libns1604-debuginfo-9.16.6-150300.22.65.1 * bind-chrootenv-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libbind9-1600-debuginfo-9.16.6-150300.22.65.1 * bind-devel-9.16.6-150300.22.65.1 * libisccc1600-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * bind-utils-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * libisccc1600-debuginfo-9.16.6-150300.22.65.1 * openSUSE Leap 15.3 (noarch) * python3-bind-9.16.6-150300.22.65.1 * bind-doc-9.16.6-150300.22.65.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * bind-debuginfo-9.16.6-150300.22.65.1 * libisc1606-debuginfo-9.16.6-150300.22.65.1 * bind-debugsource-9.16.6-150300.22.65.1 * libirs1601-9.16.6-150300.22.65.1 * libirs1601-debuginfo-9.16.6-150300.22.65.1 * libdns1605-9.16.6-150300.22.65.1 * libdns1605-debuginfo-9.16.6-150300.22.65.1 * libisccfg1600-9.16.6-150300.22.65.1 * libisc1606-9.16.6-150300.22.65.1 * libisccfg1600-debuginfo-9.16.6-150300.22.65.1 * libirs-devel-9.16.6-150300.22.65.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 12:30:49 -0000 Subject: SUSE-SU-2026:4656-1: important: Security update for glibc Message-ID: <179198104993.6676.6816156428556772375@929e079ff995> # Security update for glibc Announcement ID: SUSE-SU-2026:4656-1 Release Date: 2026-10-14T07:48:58Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4656 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4656 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4656 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4656 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4656 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64 i586 i686 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * openSUSE Leap 15.6 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-devel-static-32bit-2.38-150600.14.61.1 * glibc-profile-32bit-2.38-150600.14.61.1 * glibc-utils-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * glibc-utils-32bit-debuginfo-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64_ilp32) * glibc-devel-64bit-2.38-150600.14.61.1 * libnsl1-64bit-debuginfo-2.38-150600.14.61.1 * glibc-profile-64bit-2.38-150600.14.61.1 * glibc-devel-static-64bit-2.38-150600.14.61.1 * libnsl1-64bit-2.38-150600.14.61.1 * glibc-devel-64bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-64bit-2.38-150600.14.61.1 * glibc-64bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-64bit-debuginfo-2.38-150600.14.61.1 * glibc-64bit-2.38-150600.14.61.1 * glibc-utils-64bit-debuginfo-2.38-150600.14.61.1 * glibc-utils-64bit-2.38-150600.14.61.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * glibc-extra-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * openSUSE Leap 15.6 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * glibc-html-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 * Basesystem Module 15-SP7 (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * Development Tools Module 15-SP7 (x86_64) * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * glibc-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * glibc-locale-base-2.38-150600.14.61.1 * glibc-devel-debuginfo-2.38-150600.14.61.1 * glibc-2.38-150600.14.61.1 * libnsl1-2.38-150600.14.61.1 * glibc-utils-debuginfo-2.38-150600.14.61.1 * glibc-extra-debuginfo-2.38-150600.14.61.1 * glibc-devel-static-2.38-150600.14.61.1 * glibc-extra-2.38-150600.14.61.1 * glibc-profile-2.38-150600.14.61.1 * glibc-debugsource-2.38-150600.14.61.1 * glibc-devel-2.38-150600.14.61.1 * glibc-locale-2.38-150600.14.61.1 * libnsl1-debuginfo-2.38-150600.14.61.1 * nscd-debuginfo-2.38-150600.14.61.1 * glibc-debuginfo-2.38-150600.14.61.1 * glibc-utils-src-debugsource-2.38-150600.14.61.1 * glibc-locale-base-debuginfo-2.38-150600.14.61.1 * glibc-utils-2.38-150600.14.61.1 * nscd-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * glibc-lang-2.38-150600.14.61.1 * glibc-i18ndata-2.38-150600.14.61.1 * glibc-info-2.38-150600.14.61.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * glibc-locale-base-32bit-2.38-150600.14.61.1 * glibc-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-debuginfo-2.38-150600.14.61.1 * glibc-devel-32bit-2.38-150600.14.61.1 * glibc-locale-base-32bit-debuginfo-2.38-150600.14.61.1 * libnsl1-32bit-2.38-150600.14.61.1 * libnsl1-32bit-debuginfo-2.38-150600.14.61.1 * glibc-32bit-2.38-150600.14.61.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 12:30:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 12:30:54 -0000 Subject: SUSE-SU-2026:4655-1: important: Security update for podman Message-ID: <179198105434.6676.10381512785276039860@929e079ff995> # Security update for podman Announcement ID: SUSE-SU-2026:4655-1 Release Date: 2026-10-14T07:40:43Z Rating: important References: Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4655 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4655 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150300.9.87.1 * podman-remote-debuginfo-4.9.5-150300.9.87.1 * podman-4.9.5-150300.9.87.1 * podmansh-4.9.5-150300.9.87.1 * podman-remote-4.9.5-150300.9.87.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.87.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-debuginfo-4.9.5-150300.9.87.1 * podman-4.9.5-150300.9.87.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4663-1: important: Security update for xorg-x11-server Message-ID: <179199543355.24636.8268380896089896491@81803ed3a673> # Security update for xorg-x11-server Announcement ID: SUSE-SU-2026:4663-1 Release Date: 2026-10-14T11:34:17Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281241 * bsc#1281242 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93523 * CVE-2026-93524 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for xorg-x11-server fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4663 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4663 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4663 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4663 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4663 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-source-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * xorg-x11-server-extra-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-1.20.3-150400.38.77.1 * xorg-x11-server-debugsource-1.20.3-150400.38.77.1 * xorg-x11-server-debuginfo-1.20.3-150400.38.77.1 * xorg-x11-server-sdk-1.20.3-150400.38.77.1 * xorg-x11-server-extra-1.20.3-150400.38.77.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 16:30:40 -0000 Subject: SUSE-SU-2026:4662-1: important: Security update for amazon-cloudwatch-agent Message-ID: <179199544018.24636.1331475777232692994@81803ed3a673> # Security update for amazon-cloudwatch-agent Announcement ID: SUSE-SU-2026:4662-1 Release Date: 2026-10-14T11:33:41Z Rating: important References: * bsc#1283594 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for amazon-cloudwatch-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283594). Changes for amazon-cloudwatch-agent: Update to version 1.300073.0 * [Agent] Add Google Cloud support for GCE and GKE by @jefchien in (#2255), (#2258) and (#2260) * [Agent] Add opt-in self-telemetry endpoint for agent metrics by @movence in (#2246) * [ContainerInsights] Add KEDA and Karpenter metrics scraping by @Paamicky in (#2250) * [ContainerInsights] Add watch_replicaset toggle to disable the ReplicaSet informer by @movence in (#2246) * [Metrics/JMX] Format JVM metric units for Tomcat by @Paamicky in (#2235) * [ContainerInsights] Fix EKS OTel Container Insights log delivery and stabilize cluster-scoped metric identity by @sky333999 in (#2249) * [ContainerInsights] Only resolve cluster name when running in Kubernetes by @Paamicky in (#2259) * [Logs] Prevent high log throughput from stalling log collection while recording file read progress by @lorespiz in (#2253) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283594, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4662 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4662 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4662 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4662 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4662 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * amazon-cloudwatch-agent-1.300073.0-150400.9.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283594 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:30:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 16:30:46 -0000 Subject: SUSE-SU-2026:4661-1: important: Security update for google-osconfig-agent Message-ID: <179199544663.24636.1729124142525393822@81803ed3a673> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:4661-1 Release Date: 2026-10-14T11:32:56Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4661 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4661 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4661 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4661 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4661 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-20260928.01-150000.1.70.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:33:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 16:33:45 -0000 Subject: SUSE-SU-2026:4660-1: important: Security update for the Linux Kernel Message-ID: <179199562555.24636.6288972876139708101@81803ed3a673> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4660-1 Release Date: 2026-10-14T10:09:04Z Rating: important References: * bsc#1254408 * bsc#1266008 * bsc#1267373 * bsc#1267564 * bsc#1269136 * bsc#1271906 * bsc#1271955 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273420 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1274920 * bsc#1275455 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275694 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276341 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276553 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277742 * bsc#1277766 * bsc#1277792 * bsc#1277796 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278063 * bsc#1278070 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278195 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1278335 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279811 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280298 * bsc#1280350 * bsc#1280387 * bsc#1280487 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281383 * bsc#1281397 * bsc#1281427 * bsc#1281546 * bsc#1281680 * bsc#1281786 * bsc#1281789 * bsc#1281818 * bsc#1281927 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-46135 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68162 * CVE-2026-68290 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72301 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74363 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80663 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80725 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80799 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-80976 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89702 * CVE-2026-89899 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90088 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90259 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 CVSS scores: * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 124 vulnerabilities, contains three features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Also reflect disabled BATMAN in supported.conf. * Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * Disable CONFIG_CAN (jsc#PED-16993). * Fif selftests build failure caused by jsc#PED-16401 backport (bsc#1281927). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * docs: tls: document TLS1.3 key updates (bsc#1267564 jsc#PED-16401). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kabi: tls add counters for rekey (bsc#1267564 jsc#PED-16401). * kernel-binary.spec.in: Fix syntax error. * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * perf: Reject exited events as group leaders (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4660 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4660 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4660 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4660 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4660 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 * kernel-default-devel-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * kernel-macros-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Live Patching 15-SP6 (nosrc) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_138-default-1-150600.13.3.1 * kernel-livepatch-SLE15-SP6_Update_32-debugsource-1-150600.13.3.1 * kernel-livepatch-6_4_0-150600_23_138-default-debuginfo-1-150600.13.3.1 * kernel-default-livepatch-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-livepatch-devel-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64) * cluster-md-kmp-64kb-6.4.0-150600.23.138.1 * kernel-64kb-extra-6.4.0-150600.23.138.1 * gfs2-kmp-64kb-6.4.0-150600.23.138.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.138.1 * dlm-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-exynos-6.4.0-150600.23.138.1 * dtb-lg-6.4.0-150600.23.138.1 * dtb-marvell-6.4.0-150600.23.138.1 * dtb-xilinx-6.4.0-150600.23.138.1 * reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-cavium-6.4.0-150600.23.138.1 * dtb-socionext-6.4.0-150600.23.138.1 * ocfs2-kmp-64kb-6.4.0-150600.23.138.1 * dtb-mediatek-6.4.0-150600.23.138.1 * kernel-64kb-devel-6.4.0-150600.23.138.1 * kselftests-kmp-64kb-6.4.0-150600.23.138.1 * kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-optional-6.4.0-150600.23.138.1 * dtb-apple-6.4.0-150600.23.138.1 * dtb-altera-6.4.0-150600.23.138.1 * dtb-allwinner-6.4.0-150600.23.138.1 * dlm-kmp-64kb-6.4.0-150600.23.138.1 * dtb-amlogic-6.4.0-150600.23.138.1 * dtb-broadcom-6.4.0-150600.23.138.1 * dtb-freescale-6.4.0-150600.23.138.1 * dtb-nvidia-6.4.0-150600.23.138.1 * ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-sprd-6.4.0-150600.23.138.1 * dtb-amd-6.4.0-150600.23.138.1 * dtb-rockchip-6.4.0-150600.23.138.1 * gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-64kb-6.4.0-150600.23.138.1 * dtb-hisilicon-6.4.0-150600.23.138.1 * kernel-64kb-debuginfo-6.4.0-150600.23.138.1 * dtb-renesas-6.4.0-150600.23.138.1 * kernel-64kb-extra-debuginfo-6.4.0-150600.23.138.1 * dtb-qcom-6.4.0-150600.23.138.1 * kernel-64kb-optional-debuginfo-6.4.0-150600.23.138.1 * dtb-apm-6.4.0-150600.23.138.1 * dtb-arm-6.4.0-150600.23.138.1 * dtb-amazon-6.4.0-150600.23.138.1 * kernel-64kb-debugsource-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-150600.23.138.1 * kernel-default-livepatch-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * kselftests-kmp-default-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * kernel-default-optional-debuginfo-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-extra-debuginfo-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-optional-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kselftests-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-qa-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-extra-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc) * dtb-aarch64-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc ppc64le x86_64) * kernel-debug-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (ppc64le x86_64) * kernel-debug-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-debug-debugsource-6.4.0-150600.23.138.1 * kernel-debug-debuginfo-6.4.0-150600.23.138.1 * kernel-debug-devel-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (x86_64) * kernel-kvmsmall-vdso-6.4.0-150600.23.138.1 * kernel-debug-vdso-6.4.0-150600.23.138.1 * kernel-default-vdso-debuginfo-6.4.0-150600.23.138.1 * kernel-default-vdso-6.4.0-150600.23.138.1 * kernel-debug-vdso-debuginfo-6.4.0-150600.23.138.1 * kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 * kernel-kvmsmall-debuginfo-6.4.0-150600.23.138.1 * kernel-kvmsmall-devel-6.4.0-150600.23.138.1 * kernel-kvmsmall-debugsource-6.4.0-150600.23.138.1 * kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-default-base-rebuild-6.4.0-150600.23.138.1.150600.12.64.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_138-default-1-150600.13.3.1 * kernel-default-livepatch-devel-6.4.0-150600.23.138.1 * kernel-livepatch-6_4_0-150600_23_138-default-debuginfo-1-150600.13.3.1 * kernel-livepatch-SLE15-SP6_Update_32-debugsource-1-150600.13.3.1 * openSUSE Leap 15.6 (noarch) * kernel-docs-html-6.4.0-150600.23.138.1 * kernel-source-vanilla-6.4.0-150600.23.138.1 * kernel-macros-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.138.1 * openSUSE Leap 15.6 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.138.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-6.4.0-150600.23.138.1 * gfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-default-devel-6.4.0-150600.23.138.1 * ocfs2-kmp-default-6.4.0-150600.23.138.1 * kernel-obs-build-6.4.0-150600.23.138.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-obs-build-debugsource-6.4.0-150600.23.138.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.138.1 * reiserfs-kmp-default-6.4.0-150600.23.138.1 * cluster-md-kmp-default-6.4.0-150600.23.138.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debuginfo-6.4.0-150600.23.138.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-default-debugsource-6.4.0-150600.23.138.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.138.1 * kernel-syms-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * kernel-macros-6.4.0-150600.23.138.1 * kernel-devel-6.4.0-150600.23.138.1 * kernel-source-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc) * kernel-docs-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.138.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64) * kernel-64kb-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-devel-6.4.0-150600.23.138.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.138.1 * kernel-64kb-debugsource-6.4.0-150600.23.138.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.138.1.150600.12.64.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 16:33:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 16:33:54 -0000 Subject: SUSE-SU-2026:4659-1: important: Security update for python312 Message-ID: <179199563493.24636.8481054883973238890@81803ed3a673> # Security update for python312 Announcement ID: SUSE-SU-2026:4659-1 Release Date: 2026-10-14T10:07:30Z Rating: important References: * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-82049 CVSS scores: * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for python312 fixes the following issues: * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python312: * Update to 3.12.15 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4659 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4659 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4659 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python312-doc-devhelp-3.12.15-150600.3.71.1 * python312-doc-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * python312-testsuite-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 * python312-testsuite-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (x86_64) * python312-32bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-32bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-32bit-3.12.15-150600.3.71.1 * python312-32bit-3.12.15-150600.3.71.1 * libpython3_12-1_0-32bit-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-32bit-3.12.15-150600.3.71.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python312-64bit-3.12.15-150600.3.71.1 * libpython3_12-1_0-64bit-3.12.15-150600.3.71.1 * python312-64bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-64bit-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-64bit-debuginfo-3.12.15-150600.3.71.1 * python312-base-64bit-3.12.15-150600.3.71.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python312-base-debuginfo-3.12.15-150600.3.71.1 * python312-curses-3.12.15-150600.3.71.1 * python312-dbm-3.12.15-150600.3.71.1 * libpython3_12-1_0-debuginfo-3.12.15-150600.3.71.1 * python312-idle-3.12.15-150600.3.71.1 * python312-tools-3.12.15-150600.3.71.1 * python312-tk-3.12.15-150600.3.71.1 * python312-tk-debuginfo-3.12.15-150600.3.71.1 * libpython3_12-1_0-3.12.15-150600.3.71.1 * python312-base-3.12.15-150600.3.71.1 * python312-debuginfo-3.12.15-150600.3.71.1 * python312-debugsource-3.12.15-150600.3.71.1 * python312-curses-debuginfo-3.12.15-150600.3.71.1 * python312-devel-3.12.15-150600.3.71.1 * python312-3.12.15-150600.3.71.1 * python312-dbm-debuginfo-3.12.15-150600.3.71.1 * python312-core-debugsource-3.12.15-150600.3.71.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:30:35 -0000 Subject: SUSE-SU-2026:4676-1: critical: Security update for webkit2gtk3 Message-ID: <179200983573.46.14076326264270462980@95e70f47255d> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4676-1 Release Date: 2026-10-14T14:47:48Z Rating: critical References: * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1281116 * bsc#1284619 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43670 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64715 * CVE-2026-64753 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64784 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 233 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): * CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. * CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. * CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. * CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. * CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. * CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. * CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. * CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. * CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. * CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. * CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. * CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. * CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. * CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. * CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. * CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. * CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. * CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. * CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. * CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. * CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. * CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. * CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. * CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. * CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. * CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. * CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. * CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. * CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. * CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. * CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. * CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. * CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. * CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4676 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4676 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4676 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4676 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4676 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4676 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4676 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4676 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4676 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * webkit-jsc-6.0-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-minibrowser-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * webkit-jsc-4-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-minibrowser-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-devel-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit-6_0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * webkit2gtk4-minibrowser-2.54.1-150400.4.152.2 * webkit-jsc-6.0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit-jsc-4.1-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * webkit-jsc-4.1-2.54.1-150400.4.152.2 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150400.4.152.2 * webkit-jsc-4-debuginfo-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (x86_64) * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-32bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-32bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (aarch64_ilp32) * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-64bit-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-64bit-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150400.4.152.2 * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-2.54.1-150400.4.152.2 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-debugsource-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-devel-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.152.2 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.152.2 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.152.2 * libwebkit2gtk-4_0-37-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.152.2 * webkit2gtk3-devel-2.54.1-150400.4.152.2 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.152.2 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.152.2 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.152.2 * webkit2gtk4-debugsource-2.54.1-150400.4.152.2 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.152.2 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.152.2 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.152.2 * libwebkit2gtk-4_1-0-2.54.1-150400.4.152.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.152.2 * WebKitGTK-4.0-lang-2.54.1-150400.4.152.2 * WebKitGTK-6.0-lang-2.54.1-150400.4.152.2 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:30:43 -0000 Subject: SUSE-SU-2026:4675-1: important: Security update for container-suseconnect Message-ID: <179200984377.46.5555210328930155837@95e70f47255d> # Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4675-1 Release Date: 2026-10-14T14:29:00Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for container-suseconnect rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4675 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4675 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4675 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4675 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4675 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4675 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4675 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4675 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4675 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4675 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4675 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.97.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:30:49 -0000 Subject: SUSE-SU-2026:4674-1: important: Security update for helm Message-ID: <179200984998.46.17029618475769035214@95e70f47255d> # Security update for helm Announcement ID: SUSE-SU-2026:4674-1 Release Date: 2026-10-14T14:26:54Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that can now be installed. ## Description: This update for helm rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4674 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4674 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4674 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4674 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4674 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4674 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4674 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4674 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4674 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4674 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4674 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4674 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4674 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * Containers Module 15-SP7 (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Package Hub 15 15-SP7 (noarch) * helm-fish-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * helm-debuginfo-3.22.0-150000.1.101.1 * helm-3.22.0-150000.1.101.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * helm-zsh-completion-3.22.0-150000.1.101.1 * helm-bash-completion-3.22.0-150000.1.101.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:31:09 -0000 Subject: SUSE-SU-2026:4671-1: important: Security update for containerd Message-ID: <179200986958.46.1243658790312240314@95e70f47255d> # Security update for containerd Announcement ID: SUSE-SU-2026:4671-1 Release Date: 2026-10-14T13:40:27Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-53488 CVSS scores: * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4671 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4671 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * containerd-devel-1.7.29-16.116.1 * containerd-1.7.29-16.116.1 * containerd-ctr-1.7.29-16.116.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * containerd-devel-1.7.29-16.116.1 * containerd-1.7.29-16.116.1 * containerd-ctr-1.7.29-16.116.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:31:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:31:21 -0000 Subject: SUSE-SU-2026:4669-1: important: Security update for glibc Message-ID: <179200988172.46.9968011860093083726@95e70f47255d> # Security update for glibc Announcement ID: SUSE-SU-2026:4669-1 Release Date: 2026-10-14T13:33:43Z Rating: important References: * bsc#1282509 Cross-References: * CVE-2026-86805 CVSS scores: * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves one vulnerability can now be installed. ## Description: This update for glibc fixes the following issue: * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * glibc-info-2.11.3-17.110.58.1 * glibc-32bit-2.11.3-17.110.58.1 * nscd-2.11.3-17.110.58.1 * glibc-debuginfo-2.11.3-17.110.58.1 * glibc-html-2.11.3-17.110.58.1 * glibc-2.11.3-17.110.58.1 * glibc-profile-32bit-2.11.3-17.110.58.1 * glibc-locale-2.11.3-17.110.58.1 * glibc-debuginfo-32bit-2.11.3-17.110.58.1 * glibc-devel-2.11.3-17.110.58.1 * glibc-i18ndata-2.11.3-17.110.58.1 * glibc-debugsource-2.11.3-17.110.58.1 * glibc-devel-32bit-2.11.3-17.110.58.1 * glibc-profile-2.11.3-17.110.58.1 * glibc-locale-32bit-2.11.3-17.110.58.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * glibc-info-2.11.3-17.110.58.1 * glibc-32bit-2.11.3-17.110.58.1 * nscd-2.11.3-17.110.58.1 * glibc-debuginfo-2.11.3-17.110.58.1 * glibc-html-2.11.3-17.110.58.1 * glibc-2.11.3-17.110.58.1 * glibc-profile-32bit-2.11.3-17.110.58.1 * glibc-locale-2.11.3-17.110.58.1 * glibc-debuginfo-32bit-2.11.3-17.110.58.1 * glibc-devel-2.11.3-17.110.58.1 * glibc-i18ndata-2.11.3-17.110.58.1 * glibc-debugsource-2.11.3-17.110.58.1 * glibc-devel-32bit-2.11.3-17.110.58.1 * glibc-profile-2.11.3-17.110.58.1 * glibc-locale-32bit-2.11.3-17.110.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-86805.html * https://bugzilla.suse.com/show_bug.cgi?id=1282509 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:33:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:33:19 -0000 Subject: SUSE-SU-2026:4668-1: important: Security update for the Linux Kernel Message-ID: <179200999988.46.15812570363496379129@95e70f47255d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4668-1 Release Date: 2026-10-14T13:01:16Z Rating: important References: * bsc#1216813 * bsc#1235133 * bsc#1251966 * bsc#1252682 * bsc#1254633 * bsc#1269136 * bsc#1271906 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277820 * bsc#1277857 * bsc#1277904 * bsc#1277906 * bsc#1278054 * bsc#1278094 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278315 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281042 * bsc#1281046 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2024-56644 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74398 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56644 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133). * CVE-2025-39964: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2025-40022: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4668 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4668 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4668 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4668 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4668 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4668 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4668 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4668 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4668 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4668 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4668 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * gfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-default-5.14.21-150400.24.243.1 * gfs2-kmp-default-5.14.21-150400.24.243.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-5.14.21-150400.24.243.1 * dlm-kmp-default-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-5.14.21-150400.24.243.1 * kernel-livepatch-5_14_21-150400_24_243-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_60-debugsource-1-150400.9.3.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-livepatch-5_14_21-150400_24_243-default-1-150400.9.3.1 * kernel-default-livepatch-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64) * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * dlm-kmp-64kb-5.14.21-150400.24.243.1 * dtb-marvell-5.14.21-150400.24.243.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-extra-5.14.21-150400.24.243.1 * reiserfs-kmp-64kb-5.14.21-150400.24.243.1 * dtb-mediatek-5.14.21-150400.24.243.1 * kselftests-kmp-64kb-5.14.21-150400.24.243.1 * dtb-renesas-5.14.21-150400.24.243.1 * dtb-amd-5.14.21-150400.24.243.1 * dtb-apm-5.14.21-150400.24.243.1 * dtb-socionext-5.14.21-150400.24.243.1 * dtb-altera-5.14.21-150400.24.243.1 * dtb-amazon-5.14.21-150400.24.243.1 * dtb-xilinx-5.14.21-150400.24.243.1 * dtb-nvidia-5.14.21-150400.24.243.1 * dtb-freescale-5.14.21-150400.24.243.1 * dtb-sprd-5.14.21-150400.24.243.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-64kb-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 * dtb-exynos-5.14.21-150400.24.243.1 * dtb-cavium-5.14.21-150400.24.243.1 * dtb-amlogic-5.14.21-150400.24.243.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * dtb-arm-5.14.21-150400.24.243.1 * dtb-lg-5.14.21-150400.24.243.1 * dtb-hisilicon-5.14.21-150400.24.243.1 * dtb-apple-5.14.21-150400.24.243.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * dtb-qcom-5.14.21-150400.24.243.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * dtb-allwinner-5.14.21-150400.24.243.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-optional-5.14.21-150400.24.243.1 * dtb-broadcom-5.14.21-150400.24.243.1 * gfs2-kmp-64kb-5.14.21-150400.24.243.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.243.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-64kb-5.14.21-150400.24.243.1 * dtb-rockchip-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * gfs2-kmp-default-5.14.21-150400.24.243.1 * kernel-default-optional-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kselftests-kmp-default-5.14.21-150400.24.243.1 * kernel-default-livepatch-5.14.21-150400.24.243.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.243.1 * dlm-kmp-default-5.14.21-150400.24.243.1 * kernel-default-extra-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kselftests-kmp-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-obs-qa-5.14.21-150400.24.243.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.243.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.243.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.243.1 * ocfs2-kmp-default-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150400.24.243.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.243.1 * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-default-base-rebuild-5.14.21-150400.24.243.1.150400.24.122.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_243-default-debuginfo-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.243.1 * kernel-livepatch-SLE15-SP4_Update_60-debugsource-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_243-default-1-150400.9.3.1 * openSUSE Leap 15.4 (noarch) * kernel-source-vanilla-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-docs-html-5.14.21-150400.24.243.1 * kernel-source-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.243.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.243.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.243.1.150400.24.122.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.243.1 * kernel-syms-5.14.21-150400.24.243.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.243.1 * reiserfs-kmp-default-5.14.21-150400.24.243.1 * kernel-obs-build-debugsource-5.14.21-150400.24.243.1 * kernel-obs-build-5.14.21-150400.24.243.1 * kernel-default-debugsource-5.14.21-150400.24.243.1 * kernel-default-devel-5.14.21-150400.24.243.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * kernel-source-5.14.21-150400.24.243.1 * kernel-devel-5.14.21-150400.24.243.1 * kernel-macros-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch nosrc) * kernel-docs-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * kernel-zfcpdump-debugsource-5.14.21-150400.24.243.1 * kernel-zfcpdump-debuginfo-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.243.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-devel-5.14.21-150400.24.243.1 * kernel-64kb-debuginfo-5.14.21-150400.24.243.1 * kernel-64kb-debugsource-5.14.21-150400.24.243.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2024-56644.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1216813 * https://bugzilla.suse.com/show_bug.cgi?id=1235133 * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:38:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:38:01 -0000 Subject: SUSE-SU-2026:4665-1: important: Security update for the Linux Kernel Message-ID: <179201028130.46.3979587371025840080@95e70f47255d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4665-1 Release Date: 2026-10-14T12:53:56Z Rating: important References: * bsc#1251966 * bsc#1252682 * bsc#1253005 * bsc#1254633 * bsc#1266008 * bsc#1269136 * bsc#1271906 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275304 * bsc#1275307 * bsc#1275470 * bsc#1275535 * bsc#1275540 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277254 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68155 * CVE-2026-68158 * CVE-2026-68159 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72083 * CVE-2026-72084 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72339 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74556 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68155 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68155 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68155 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68159 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68159 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68159 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). * CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). * CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: \- Disable BATMAN in supported.conf. \- Disable CONFIG_BATMAN_ADV (jsc#PED-16892). \- Disable CONFIG_CAN (jsc#PED-16993). \- default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). \- fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). \- i2c: core: fix irq domain leak on adapter registration failure (git-fixes). \- kernel-binary.spec.in: Fix syntax error. \- net: mana: Cap MSI-X vectors to the device MSI-X table size (bsc#1277254). \- net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git-fixes). \- net: mana: Fall back to scattered pages for GDMA queues (bsc#1281085). \- net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). \- perf: Reject exited events as group leaders (git-fixes). \- slab: Introduce kmalloc_obj() and family (bsc#1280139). \- slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). \- smb: client: fix data/file corruption on reconnects (bsc#1253005). \- smb: client: fix stuck kworkers on reconnects during writes (bsc#1253005). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4665 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4665 ## Package List: * openSUSE Leap 15.5 (x86_64) * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.164.1 * cluster-md-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.164.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-extra-5.14.21-150500.13.164.1 * kernel-rt-vdso-5.14.21-150500.13.164.1 * kernel-rt_debug-devel-5.14.21-150500.13.164.1 * reiserfs-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt-debugsource-5.14.21-150500.13.164.1 * kernel-rt-optional-5.14.21-150500.13.164.1 * dlm-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-vdso-5.14.21-150500.13.164.1 * kselftests-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt-debuginfo-5.14.21-150500.13.164.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.164.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.164.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-livepatch-5.14.21-150500.13.164.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.164.1 * gfs2-kmp-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-devel-5.14.21-150500.13.164.1 * kernel-syms-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.164.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.164.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.164.1 * ocfs2-kmp-rt-5.14.21-150500.13.164.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.164.1 * kernel-source-rt-5.14.21-150500.13.164.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.164.1 * kernel-rt_debug-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.164.1 * kernel-source-rt-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.164.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debugsource-5.14.21-150500.13.164.1 * kernel-rt-debuginfo-5.14.21-150500.13.164.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68155.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://www.suse.com/security/cve/CVE-2026-68159.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1253005 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275304 * https://bugzilla.suse.com/show_bug.cgi?id=1275307 * https://bugzilla.suse.com/show_bug.cgi?id=1275470 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 14 20:38:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 14 Oct 2026 20:38:19 -0000 Subject: SUSE-SU-2026:4664-1: important: Security update for bind Message-ID: <179201029975.46.12344639577872449761@95e70f47255d> # Security update for bind Announcement ID: SUSE-SU-2026:4664-1 Release Date: 2026-10-14T12:53:17Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280440 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-77119 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4664 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4664 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4664 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4664 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4664 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * openSUSE Leap 15.4 (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * bind-utils-9.16.50-150400.5.70.1 * bind-utils-debuginfo-9.16.50-150400.5.70.1 * bind-9.16.50-150400.5.70.1 * bind-debuginfo-9.16.50-150400.5.70.1 * bind-debugsource-9.16.50-150400.5.70.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * bind-doc-9.16.50-150400.5.70.1 * python3-bind-9.16.50-150400.5.70.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 08:33:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 08:33:05 -0000 Subject: SUSE-SU-2026:4667-1: important: Security update for the Linux Kernel Message-ID: <179205318515.20509.9915867464566701412@43884348fd0a> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4667-1 Release Date: 2026-10-14T12:57:55Z Rating: important References: * bsc#1251966 * bsc#1252682 * bsc#1253005 * bsc#1254633 * bsc#1266008 * bsc#1269136 * bsc#1271906 * bsc#1273251 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275304 * bsc#1275307 * bsc#1275470 * bsc#1275535 * bsc#1275540 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275696 * bsc#1275972 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277254 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277553 * bsc#1277561 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277813 * bsc#1277820 * bsc#1277837 * bsc#1277857 * bsc#1277898 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1278054 * bsc#1278094 * bsc#1278108 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278253 * bsc#1278294 * bsc#1278315 * bsc#1279422 * bsc#1279487 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281042 * bsc#1281046 * bsc#1281085 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282648 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-43502 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64556 * CVE-2026-64580 * CVE-2026-68155 * CVE-2026-68158 * CVE-2026-68159 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72083 * CVE-2026-72084 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72164 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72339 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-72449 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74388 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74556 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74737 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80580 * CVE-2026-80714 * CVE-2026-80716 * CVE-2026-80737 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-80909 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89544 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68155 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68155 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68155 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68159 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68159 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68159 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72083 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74556 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-74556 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 110 vulnerabilities, contains 10 features and has seven security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2025-39964: kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: kernel: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68155: libceph: Reject monmaps advertising zero monitors (bsc#1275304). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1275307). * CVE-2026-68159: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE (bsc#1275470). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72083: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (bsc#1275535). * CVE-2026-72084: scsi: target: core: Generate correct identifiers for PR OUT transport IDs (bsc#1275540). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * net: mana: Cap MSI-X vectors to the device MSI-X table size (bsc#1277254). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Fall back to scattered pages for GDMA queues (bsc#1281085). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * perf: Reject exited events as group leaders (git-fixes). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: fix data/file corruption on reconnects (bsc#1253005). * smb: client: fix stuck kworkers on reconnects during writes (bsc#1253005). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4667 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4667 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4667 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4667 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4667 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4667 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4667 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.192.2 * kernel-livepatch-5_14_21-150500_55_192-default-1-150500.11.3.2 * kernel-livepatch-SLE15-SP5_Update_46-debugsource-1-150500.11.3.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * kernel-default-livepatch-devel-5.14.21-150500.55.192.2 * kernel-livepatch-5_14_21-150500_55_192-default-debuginfo-1-150500.11.3.2 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-extra-5.14.21-150500.55.192.2 * dlm-kmp-64kb-5.14.21-150500.55.192.2 * ocfs2-kmp-64kb-5.14.21-150500.55.192.2 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kselftests-kmp-64kb-5.14.21-150500.55.192.2 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-optional-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 * reiserfs-kmp-64kb-5.14.21-150500.55.192.2 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-64kb-5.14.21-150500.55.192.2 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-64kb-5.14.21-150500.55.192.2 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.192.2 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-default-livepatch-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-extra-debuginfo-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-optional-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-qa-5.14.21-150500.55.192.1 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * kselftests-kmp-default-5.14.21-150500.55.192.2 * ocfs2-kmp-default-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-extra-5.14.21-150500.55.192.2 * kernel-default-optional-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debugsource-5.14.21-150500.55.192.2 * kernel-default-base-rebuild-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * kernel-kvmsmall-devel-5.14.21-150500.55.192.2 * kernel-kvmsmall-debuginfo-5.14.21-150500.55.192.2 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_192-default-1-150500.11.3.2 * kernel-livepatch-5_14_21-150500_55_192-default-debuginfo-1-150500.11.3.2 * kernel-livepatch-SLE15-SP5_Update_46-debugsource-1-150500.11.3.2 * kernel-default-livepatch-devel-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (x86_64) * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.192.2 * kernel-default-vdso-debuginfo-5.14.21-150500.55.192.2 * kernel-kvmsmall-vdso-5.14.21-150500.55.192.2 * kernel-default-vdso-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-vanilla-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * kernel-docs-html-5.14.21-150500.55.192.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.192.2 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.192.2 * kernel-zfcpdump-debugsource-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-debuginfo-5.14.21-150500.55.192.2 * cluster-md-kmp-default-5.14.21-150500.55.192.2 * dlm-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-5.14.21-150500.55.192.2 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-syms-5.14.21-150500.55.192.1 * kernel-obs-build-debugsource-5.14.21-150500.55.192.2 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * kernel-default-debugsource-5.14.21-150500.55.192.2 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.192.2 * gfs2-kmp-default-5.14.21-150500.55.192.2 * kernel-default-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-obs-build-5.14.21-150500.55.192.2 * reiserfs-kmp-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.192.2.150500.6.89.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-devel-5.14.21-150500.55.192.2 * kernel-macros-5.14.21-150500.55.192.2 * kernel-source-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.192.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150500.55.192.2 * kernel-zfcpdump-debugsource-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.192.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.192.2 * kernel-64kb-debugsource-5.14.21-150500.55.192.2 * kernel-64kb-devel-5.14.21-150500.55.192.2 * kernel-64kb-debuginfo-5.14.21-150500.55.192.2 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68155.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://www.suse.com/security/cve/CVE-2026-68159.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72083.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74556.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1253005 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275304 * https://bugzilla.suse.com/show_bug.cgi?id=1275307 * https://bugzilla.suse.com/show_bug.cgi?id=1275470 * https://bugzilla.suse.com/show_bug.cgi?id=1275535 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275696 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 08:35:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 08:35:14 -0000 Subject: SUSE-SU-2026:4666-1: important: Security update for the Linux Kernel Message-ID: <179205331431.20509.812919170560371853@43884348fd0a> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4666-1 Release Date: 2026-10-14T12:54:21Z Rating: important References: * bsc#1216813 * bsc#1235133 * bsc#1251966 * bsc#1252682 * bsc#1254633 * bsc#1269136 * bsc#1271906 * bsc#1273290 * bsc#1273339 * bsc#1273953 * bsc#1274037 * bsc#1274836 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276475 * bsc#1276519 * bsc#1276572 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1277129 * bsc#1277149 * bsc#1277249 * bsc#1277410 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277574 * bsc#1277590 * bsc#1277626 * bsc#1277766 * bsc#1277792 * bsc#1277820 * bsc#1277857 * bsc#1277904 * bsc#1277906 * bsc#1278054 * bsc#1278094 * bsc#1278178 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278315 * bsc#1279532 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279835 * bsc#1279875 * bsc#1280139 * bsc#1280243 * bsc#1280263 * bsc#1280350 * bsc#1280496 * bsc#1280727 * bsc#1280733 * bsc#1280786 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281042 * bsc#1281046 * bsc#1281229 * bsc#1281295 * bsc#1281360 * bsc#1281546 * bsc#1281818 * bsc#1282110 * bsc#1282113 * bsc#1282284 * bsc#1282881 * bsc#1282906 * bsc#1282932 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2024-56644 * CVE-2025-39964 * CVE-2025-40022 * CVE-2026-100075 * CVE-2026-53266 * CVE-2026-53400 * CVE-2026-64279 * CVE-2026-64319 * CVE-2026-64422 * CVE-2026-64580 * CVE-2026-68376 * CVE-2026-68445 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72129 * CVE-2026-72136 * CVE-2026-72157 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72398 * CVE-2026-72434 * CVE-2026-74267 * CVE-2026-74283 * CVE-2026-74330 * CVE-2026-74398 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74469 * CVE-2026-74473 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74540 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74597 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74688 * CVE-2026-74700 * CVE-2026-74719 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80852 * CVE-2026-81000 * CVE-2026-89479 * CVE-2026-89482 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89603 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89674 * CVE-2026-89932 * CVE-2026-89968 * CVE-2026-90003 * CVE-2026-90104 * CVE-2026-90198 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-93104 * CVE-2026-93782 * CVE-2026-93787 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-56644 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-56644 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-39964 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-39964 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40022 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-40022 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53266 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89932 ( SUSE ): 8.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L * CVE-2026-89932 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L * CVE-2026-89932 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves 86 vulnerabilities, contains 10 features and has two security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2024-56644: net/ipv6: release expired exception dst cached in socket (bsc#1216813 bsc#1235133). * CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40022: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (bsc#1252682). * CVE-2026-53266: netfilter: bridge: make ebt_snat ARP rewrite writable (bsc#1269136). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64319: nvmet-auth: fix return value check in auth send (bsc#1273339). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72398: sctp: fix association labeling in the duplicate COOKIE-ECHO case (bsc#1276381). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89932: KVM: nVMX: Always flush vpid02 on first use (bsc#1281360). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Also reflect disabled BATMAN in supported.conf. * Disable CONFIG_CAN (jsc#PED-16993). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * fbdev/sysfs: Fix locking (jsc#PED-1166 jsc#PED-1168 jsc#PED-1170 jsc#PED-1218 jsc#PED-1220 jsc#PED-1222 jsc#PED-1223 jsc#PED-1225). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4666 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4666 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4666 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4666 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.189.1 * kernel-rt-debugsource-5.14.21-150400.15.189.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.189.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2024-56644.html * https://www.suse.com/security/cve/CVE-2025-39964.html * https://www.suse.com/security/cve/CVE-2025-40022.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-53266.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89932.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://bugzilla.suse.com/show_bug.cgi?id=1216813 * https://bugzilla.suse.com/show_bug.cgi?id=1235133 * https://bugzilla.suse.com/show_bug.cgi?id=1251966 * https://bugzilla.suse.com/show_bug.cgi?id=1252682 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1269136 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281360 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://jira.suse.com/browse/PED-1166 * https://jira.suse.com/browse/PED-1168 * https://jira.suse.com/browse/PED-1170 * https://jira.suse.com/browse/PED-1218 * https://jira.suse.com/browse/PED-1220 * https://jira.suse.com/browse/PED-1222 * https://jira.suse.com/browse/PED-1223 * https://jira.suse.com/browse/PED-1225 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:31:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:31:13 -0000 Subject: SUSE-SU-2026:24175-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179206747384.22980.12389259283614695775@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24175-1 Release Date: 2026-10-06T11:01:59Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1845 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1845 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:31:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:31:44 -0000 Subject: SUSE-SU-2026:24174-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179206750489.22980.9546591490005481558@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24174-1 Release Date: 2026-10-06T10:42:40Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1844 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1844 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_5-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:32:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:32:19 -0000 Subject: SUSE-SU-2026:24173-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179206753909.22980.12374099609096735286@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24173-1 Release Date: 2026-10-06T09:09:25Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1843 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1843 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_5-default-debuginfo-19-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-19-160000.4.3 * kernel-livepatch-SLE16_Update_0-debugsource-19-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:32:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:32:50 -0000 Subject: SUSE-SU-2026:24172-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179206757084.22980.17716217252500464042@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24172-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1842 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1842 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-15-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:33:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:33:24 -0000 Subject: SUSE-SU-2026:24171-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179206760435.22980.6141024068279610144@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24171-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1841 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1841 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:33:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:33:55 -0000 Subject: SUSE-SU-2026:24170-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179206763588.22980.7352519350428543892@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24170-1 Release Date: 2026-10-06T08:28:37Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1840 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1840 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:34:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:34:27 -0000 Subject: SUSE-SU-2026:24169-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179206766755.22980.527456369581465979@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24169-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1839 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1839 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_6-default-debuginfo-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-17-160000.1.1 * kernel-livepatch-SLE16_Update_1-debugsource-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:34:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:34:59 -0000 Subject: SUSE-SU-2026:24168-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179206769939.22980.9703690277319870700@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24168-1 Release Date: 2026-10-06T07:32:07Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1838 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1838 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:35:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:35:29 -0000 Subject: SUSE-SU-2026:24167-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179206772907.22980.15764331818145478200@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24167-1 Release Date: 2026-10-05T21:37:46Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1837 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1837 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_13-debugsource-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-debuginfo-6-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-6-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:36:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:36:01 -0000 Subject: SUSE-SU-2026:24166-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179206776189.22980.3672643279468688318@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24166-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1836 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1836 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-6-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-6-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:36:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:36:32 -0000 Subject: SUSE-SU-2026:24165-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179206779243.22980.13980277267743201834@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24165-1 Release Date: 2026-10-05T19:37:22Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1835 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1835 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-6-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-6-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:37:05 -0000 Subject: SUSE-SU-2026:24164-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179206782525.22980.17879786771180108607@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24164-1 Release Date: 2026-10-05T19:09:29Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1834 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1834 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:37:36 -0000 Subject: SUSE-SU-2026:24163-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179206785642.22980.521973242445707954@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24163-1 Release Date: 2026-10-05T17:08:09Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1832 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1832 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:37:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:37:56 -0000 Subject: SUSE-SU-2026:24162-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179206787665.22980.6797683560403064796@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24162-1 Release Date: 2026-10-05T15:56:29Z Rating: important References: * bsc#1272391 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275228 * bsc#1276299 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-63888 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-64000 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-68121 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1831 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1831 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-3-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-3-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:38:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:38:29 -0000 Subject: SUSE-SU-2026:24161-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179206790947.22980.17577536267960354161@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24161-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1830 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1830 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-8-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:39:01 -0000 Subject: SUSE-SU-2026:24160-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179206794142.22980.9862575246993424591@3bce49fe9f47> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24160-1 Release Date: 2026-10-05T13:41:36Z Rating: important References: * bsc#1267370 * bsc#1272208 * bsc#1272283 * bsc#1272391 * bsc#1272679 * bsc#1272837 * bsc#1273003 * bsc#1273011 * bsc#1273012 * bsc#1273015 * bsc#1273051 * bsc#1273052 * bsc#1273833 * bsc#1273837 * bsc#1275162 * bsc#1275228 * bsc#1276299 * bsc#1276493 * bsc#1277409 * bsc#1277506 Cross-References: * CVE-2026-46116 * CVE-2026-63802 * CVE-2026-63888 * CVE-2026-63912 * CVE-2026-63917 * CVE-2026-63920 * CVE-2026-63921 * CVE-2026-63944 * CVE-2026-63971 * CVE-2026-63994 * CVE-2026-64000 * CVE-2026-64011 * CVE-2026-64114 * CVE-2026-64121 * CVE-2026-64189 * CVE-2026-68121 * CVE-2026-68202 * CVE-2026-72217 * CVE-2026-74394 * CVE-2026-74612 CVSS scores: * CVE-2026-46116 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46116 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46116 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63802 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63802 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63888 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63888 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63888 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63912 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63917 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63917 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63920 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63920 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63920 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63921 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L * CVE-2026-63921 ( SUSE ): 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L * CVE-2026-63921 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63944 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63944 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63971 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63971 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63994 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63994 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64000 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64000 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64000 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64011 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64011 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64114 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64114 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64121 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64121 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64121 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64189 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64189 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64189 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68121 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-68121 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68202 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68202 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72217 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72217 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74394 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74394 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-46116: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (bsc#1267370). * CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272283). * CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (bsc#1272391). * CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272837). * CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1273015). * CVE-2026-63920: ipv6: validate extension header length before copying to cmsg (bsc#1273012). * CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1273011). * CVE-2026-63944: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1273003). * CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272679). * CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (bsc#1273051). * CVE-2026-64000: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273052). * CVE-2026-64011: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1276493). * CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273833). * CVE-2026-64121: net: ifb: report ethtool stats over num_tx_queues (bsc#1273837). * CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272208). * CVE-2026-68121: pppoe: reload header pointer after dev_hard_header() (bsc#1275228). * CVE-2026-68202: ALSA: seq: close a re-opened queue timer in the destructor (bsc#1275162). * CVE-2026-72217: SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing (bsc#1276299). * CVE-2026-74394: RDMA/srpt: fix integer overflow in immediate data length check (bsc#1277409). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277506). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1829 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1829 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-8-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-8-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-8-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46116.html * https://www.suse.com/security/cve/CVE-2026-63802.html * https://www.suse.com/security/cve/CVE-2026-63888.html * https://www.suse.com/security/cve/CVE-2026-63912.html * https://www.suse.com/security/cve/CVE-2026-63917.html * https://www.suse.com/security/cve/CVE-2026-63920.html * https://www.suse.com/security/cve/CVE-2026-63921.html * https://www.suse.com/security/cve/CVE-2026-63944.html * https://www.suse.com/security/cve/CVE-2026-63971.html * https://www.suse.com/security/cve/CVE-2026-63994.html * https://www.suse.com/security/cve/CVE-2026-64000.html * https://www.suse.com/security/cve/CVE-2026-64011.html * https://www.suse.com/security/cve/CVE-2026-64114.html * https://www.suse.com/security/cve/CVE-2026-64121.html * https://www.suse.com/security/cve/CVE-2026-64189.html * https://www.suse.com/security/cve/CVE-2026-68121.html * https://www.suse.com/security/cve/CVE-2026-68202.html * https://www.suse.com/security/cve/CVE-2026-72217.html * https://www.suse.com/security/cve/CVE-2026-74394.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://bugzilla.suse.com/show_bug.cgi?id=1267370 * https://bugzilla.suse.com/show_bug.cgi?id=1272208 * https://bugzilla.suse.com/show_bug.cgi?id=1272283 * https://bugzilla.suse.com/show_bug.cgi?id=1272391 * https://bugzilla.suse.com/show_bug.cgi?id=1272679 * https://bugzilla.suse.com/show_bug.cgi?id=1272837 * https://bugzilla.suse.com/show_bug.cgi?id=1273003 * https://bugzilla.suse.com/show_bug.cgi?id=1273011 * https://bugzilla.suse.com/show_bug.cgi?id=1273012 * https://bugzilla.suse.com/show_bug.cgi?id=1273015 * https://bugzilla.suse.com/show_bug.cgi?id=1273051 * https://bugzilla.suse.com/show_bug.cgi?id=1273052 * https://bugzilla.suse.com/show_bug.cgi?id=1273833 * https://bugzilla.suse.com/show_bug.cgi?id=1273837 * https://bugzilla.suse.com/show_bug.cgi?id=1275162 * https://bugzilla.suse.com/show_bug.cgi?id=1275228 * https://bugzilla.suse.com/show_bug.cgi?id=1276299 * https://bugzilla.suse.com/show_bug.cgi?id=1276493 * https://bugzilla.suse.com/show_bug.cgi?id=1277409 * https://bugzilla.suse.com/show_bug.cgi?id=1277506 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:39:12 -0000 Subject: SUSE-SU-2026:24159-1: important: Security update for qemu Message-ID: <179206795276.22980.8884918435105053174@3bce49fe9f47> # Security update for qemu Announcement ID: SUSE-SU-2026:24159-1 Release Date: 2026-10-07T09:59:52Z Rating: important References: * bsc#1263864 * bsc#1279962 * bsc#1282077 * bsc#1282578 * bsc#1282918 Cross-References: * CVE-2026-81627 * CVE-2026-93834 CVSS scores: * CVE-2026-81627 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-81627 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-81627 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93834 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-93834 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has three fixes can now be installed. ## Description: This update for qemu fixes the following issues: Security issues fixed: * CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset `D_LCK` protection and injecting code into System Management Mode memory (bsc#1282077). * CVE-2026-93834: hw/9pfs: mutate FID path from main thread only (bsc#1282578). Changes for qemu: * Bugfixes: * [openSUSE][RPM] spec: drop qemu-ipxe Requires for ppc (bsc#1282918) * virtio: fix queue size validation against allocated maximum (bsc#1279962) * virtio-mmio: fix QUEUE_NUM_MAX (bsc#1279962) * target/ppc/kvm: Use host compatibility mode for nested guests (bsc#1263864) * target/ppc/kvm: Add support for querying host compatibility mode (bsc#1263864) * linux-headers: Update to include KVM_CAP_PPC_COMPAT_CAPS (bsc#1263864) * linux-headers: Update to Linux v7.2-rc1 with KVM_S390_VM_CPU_FEAT_ASTFLEIE2 (bsc#1263864) * linux-headers: Update to Linux v7.1-rc4 (bsc#1263864) * scripts/update-linux-headers: Add typelimits.h (bsc#1263864) * update-linux-headers: Inject VIRTIO_RING_NO_LEGACY in virtio_ring.h (bsc#1263864) * linux-headers: Add nitro_enclaves.h (bsc#1263864) * scripts/update-linux-headers: Add Nitro Enclaves header (bsc#1263864) * standard-headers: Update virtio_spi.h from Linux v6.18-rc3 (bsc#1263864) * linux-headers: Update to Linux v6.19-rc1 (bsc#1263864) * update-linux-headers: Remove "asm-s390/unistd_32.h" (bsc#1263864) * linux-headers: Update to Linux v6.18-rc3 (bsc#1263864) * linux-headers/linux: Add mshv.h headers (bsc#1263864) * include/hw/hyperv: Add MSHV ABI header definitions (bsc#1263864) * linux-headers: Update to Linux v6.17-rc1 (bsc#1263864) * linux-headers: deal with counted_by annotation (bsc#1263864) * linux-headers: Remove the 32-bit arm headers (bsc#1263864) * update Linux headers to KVM tree master (bsc#1263864) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1860 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1860 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * qemu-audio-dbus-10.0.13-160000.2.1 * qemu-block-nfs-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-audio-alsa-debuginfo-10.0.13-160000.2.1 * qemu-audio-dbus-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-arm-10.0.13-160000.2.1 * qemu-headless-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-linux-user-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-linux-user-debugsource-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-block-curl-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-linux-user-debuginfo-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-block-dmg-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-block-dmg-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-guest-agent-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-block-curl-10.0.13-160000.2.1 * qemu-ivshmem-tools-10.0.13-160000.2.1 * qemu-vhost-user-gpu-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * qemu-audio-alsa-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-10.0.13-160000.2.1 * qemu-audio-oss-10.0.13-160000.2.1 * qemu-audio-oss-debuginfo-10.0.13-160000.2.1 * qemu-block-nfs-debuginfo-10.0.13-160000.2.1 * qemu-extra-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-extra-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-vhost-user-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-ivshmem-tools-debuginfo-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * qemu-doc-10.0.13-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-skiboot-10.0.13-160000.2.1 * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-microvm-10.0.13-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * qemu-audio-dbus-10.0.13-160000.2.1 * qemu-block-nfs-10.0.13-160000.2.1 * qemu-debugsource-10.0.13-160000.2.1 * qemu-audio-alsa-debuginfo-10.0.13-160000.2.1 * qemu-audio-dbus-debuginfo-10.0.13-160000.2.1 * qemu-block-iscsi-debuginfo-10.0.13-160000.2.1 * qemu-arm-10.0.13-160000.2.1 * qemu-headless-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-10.0.13-160000.2.1 * qemu-linux-user-10.0.13-160000.2.1 * qemu-pr-helper-10.0.13-160000.2.1 * qemu-ppc-10.0.13-160000.2.1 * qemu-ppc-debuginfo-10.0.13-160000.2.1 * qemu-s390x-10.0.13-160000.2.1 * qemu-img-10.0.13-160000.2.1 * qemu-linux-user-debugsource-10.0.13-160000.2.1 * qemu-block-iscsi-10.0.13-160000.2.1 * qemu-guest-agent-debuginfo-10.0.13-160000.2.1 * qemu-block-curl-debuginfo-10.0.13-160000.2.1 * qemu-img-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-debuginfo-10.0.13-160000.2.1 * qemu-ksm-10.0.13-160000.2.1 * qemu-linux-user-debuginfo-10.0.13-160000.2.1 * qemu-tools-debuginfo-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-debuginfo-10.0.13-160000.2.1 * qemu-block-dmg-10.0.13-160000.2.1 * qemu-arm-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-debuginfo-10.0.13-160000.2.1 * qemu-tools-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-10.0.13-160000.2.1 * qemu-block-dmg-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-host-debuginfo-10.0.13-160000.2.1 * qemu-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-10.0.13-160000.2.1 * qemu-guest-agent-10.0.13-160000.2.1 * qemu-x86-10.0.13-160000.2.1 * qemu-block-curl-10.0.13-160000.2.1 * qemu-ivshmem-tools-10.0.13-160000.2.1 * qemu-vhost-user-gpu-10.0.13-160000.2.1 * qemu-x86-debuginfo-10.0.13-160000.2.1 * qemu-audio-alsa-10.0.13-160000.2.1 * qemu-hw-display-virtio-gpu-pci-debuginfo-10.0.13-160000.2.1 * qemu-audio-jack-10.0.13-160000.2.1 * qemu-audio-oss-10.0.13-160000.2.1 * qemu-audio-oss-debuginfo-10.0.13-160000.2.1 * qemu-block-nfs-debuginfo-10.0.13-160000.2.1 * qemu-extra-debuginfo-10.0.13-160000.2.1 * qemu-hw-s390x-virtio-gpu-ccw-10.0.13-160000.2.1 * qemu-hw-usb-host-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-debuginfo-10.0.13-160000.2.1 * qemu-pr-helper-debuginfo-10.0.13-160000.2.1 * qemu-extra-10.0.13-160000.2.1 * qemu-hw-usb-redirect-debuginfo-10.0.13-160000.2.1 * qemu-vhost-user-gpu-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-smartcard-10.0.13-160000.2.1 * qemu-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-debuginfo-10.0.13-160000.2.1 * qemu-hw-usb-redirect-10.0.13-160000.2.1 * qemu-hw-display-virtio-vga-debuginfo-10.0.13-160000.2.1 * qemu-ivshmem-tools-debuginfo-10.0.13-160000.2.1 * qemu-s390x-debuginfo-10.0.13-160000.2.1 * qemu-block-ssh-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * qemu-doc-10.0.13-160000.2.1 * qemu-lang-10.0.13-160000.2.1 * qemu-skiboot-10.0.13-160000.2.1 * qemu-seabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-vgabios-10.0.131.16.3_3_g3d33c746-160000.2.1 * qemu-microvm-10.0.13-160000.2.1 * qemu-SLOF-10.0.13-160000.2.1 * qemu-ipxe-10.0.13-160000.2.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * qemu-vmsr-helper-10.0.13-160000.2.1 * qemu-vmsr-helper-debuginfo-10.0.13-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-81627.html * https://www.suse.com/security/cve/CVE-2026-93834.html * https://bugzilla.suse.com/show_bug.cgi?id=1263864 * https://bugzilla.suse.com/show_bug.cgi?id=1279962 * https://bugzilla.suse.com/show_bug.cgi?id=1282077 * https://bugzilla.suse.com/show_bug.cgi?id=1282578 * https://bugzilla.suse.com/show_bug.cgi?id=1282918 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:39:30 -0000 Subject: SUSE-SU-2026:24158-1: important: Security update for php8 Message-ID: <179206797059.22980.1262821286390732309@3bce49fe9f47> # Security update for php8 Announcement ID: SUSE-SU-2026:24158-1 Release Date: 2026-10-07T09:41:30Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). Changes for php8: * Updated to version 8.4.26 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1858 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1858 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * php8-opcache-debuginfo-8.4.26-160000.1.1 * php8-sysvshm-8.4.26-160000.1.1 * php8-sysvshm-debuginfo-8.4.26-160000.1.1 * php8-sysvsem-debuginfo-8.4.26-160000.1.1 * apache2-mod_php8-8.4.26-160000.1.1 * php8-ffi-8.4.26-160000.1.1 * php8-intl-debuginfo-8.4.26-160000.1.1 * php8-posix-debuginfo-8.4.26-160000.1.1 * php8-shmop-debuginfo-8.4.26-160000.1.1 * php8-fpm-8.4.26-160000.1.1 * php8-calendar-8.4.26-160000.1.1 * php8-fileinfo-8.4.26-160000.1.1 * php8-sqlite-8.4.26-160000.1.1 * php8-odbc-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-debuginfo-8.4.26-160000.1.1 * php8-enchant-debuginfo-8.4.26-160000.1.1 * php8-fpm-debugsource-8.4.26-160000.1.1 * php8-opcache-8.4.26-160000.1.1 * php8-xmlwriter-8.4.26-160000.1.1 * php8-mbstring-8.4.26-160000.1.1 * php8-ftp-debuginfo-8.4.26-160000.1.1 * php8-mysql-8.4.26-160000.1.1 * php8-odbc-8.4.26-160000.1.1 * php8-debugsource-8.4.26-160000.1.1 * php8-curl-debuginfo-8.4.26-160000.1.1 * php8-bcmath-debuginfo-8.4.26-160000.1.1 * php8-pgsql-8.4.26-160000.1.1 * php8-tidy-8.4.26-160000.1.1 * php8-fastcgi-debuginfo-8.4.26-160000.1.1 * php8-xmlreader-debuginfo-8.4.26-160000.1.1 * php8-sysvmsg-8.4.26-160000.1.1 * php8-xsl-debuginfo-8.4.26-160000.1.1 * php8-embed-8.4.26-160000.1.1 * php8-bz2-debuginfo-8.4.26-160000.1.1 * php8-ldap-debuginfo-8.4.26-160000.1.1 * php8-gd-debuginfo-8.4.26-160000.1.1 * php8-pgsql-debuginfo-8.4.26-160000.1.1 * php8-readline-8.4.26-160000.1.1 * php8-gd-8.4.26-160000.1.1 * apache2-mod_php8-debugsource-8.4.26-160000.1.1 * php8-sysvsem-8.4.26-160000.1.1 * apache2-mod_php8-debuginfo-8.4.26-160000.1.1 * php8-ldap-8.4.26-160000.1.1 * php8-fastcgi-debugsource-8.4.26-160000.1.1 * php8-openssl-debuginfo-8.4.26-160000.1.1 * php8-cli-8.4.26-160000.1.1 * php8-ctype-debuginfo-8.4.26-160000.1.1 * php8-zlib-debuginfo-8.4.26-160000.1.1 * php8-intl-8.4.26-160000.1.1 * php8-debuginfo-8.4.26-160000.1.1 * php8-ffi-debuginfo-8.4.26-160000.1.1 * php8-ftp-8.4.26-160000.1.1 * php8-iconv-debuginfo-8.4.26-160000.1.1 * php8-sodium-debuginfo-8.4.26-160000.1.1 * php8-fileinfo-debuginfo-8.4.26-160000.1.1 * php8-tidy-debuginfo-8.4.26-160000.1.1 * php8-xsl-8.4.26-160000.1.1 * php8-zlib-8.4.26-160000.1.1 * php8-pdo-debuginfo-8.4.26-160000.1.1 * php8-soap-debuginfo-8.4.26-160000.1.1 * php8-sockets-debuginfo-8.4.26-160000.1.1 * php8-pdo-8.4.26-160000.1.1 * php8-sysvmsg-debuginfo-8.4.26-160000.1.1 * php8-snmp-debuginfo-8.4.26-160000.1.1 * php8-calendar-debuginfo-8.4.26-160000.1.1 * php8-snmp-8.4.26-160000.1.1 * php8-fpm-debuginfo-8.4.26-160000.1.1 * php8-pcntl-debuginfo-8.4.26-160000.1.1 * php8-dom-debuginfo-8.4.26-160000.1.1 * php8-gmp-debuginfo-8.4.26-160000.1.1 * php8-bcmath-8.4.26-160000.1.1 * php8-bz2-8.4.26-160000.1.1 * php8-fastcgi-8.4.26-160000.1.1 * php8-gettext-debuginfo-8.4.26-160000.1.1 * php8-gettext-8.4.26-160000.1.1 * php8-dba-debuginfo-8.4.26-160000.1.1 * php8-8.4.26-160000.1.1 * php8-mbstring-debuginfo-8.4.26-160000.1.1 * php8-dba-8.4.26-160000.1.1 * php8-posix-8.4.26-160000.1.1 * php8-phar-8.4.26-160000.1.1 * php8-cli-debuginfo-8.4.26-160000.1.1 * php8-devel-8.4.26-160000.1.1 * php8-xmlreader-8.4.26-160000.1.1 * php8-zip-debuginfo-8.4.26-160000.1.1 * php8-phar-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-8.4.26-160000.1.1 * php8-exif-8.4.26-160000.1.1 * php8-exif-debuginfo-8.4.26-160000.1.1 * php8-dom-8.4.26-160000.1.1 * php8-readline-debuginfo-8.4.26-160000.1.1 * php8-sockets-8.4.26-160000.1.1 * php8-openssl-8.4.26-160000.1.1 * php8-pcntl-8.4.26-160000.1.1 * php8-curl-8.4.26-160000.1.1 * php8-gmp-8.4.26-160000.1.1 * php8-sodium-8.4.26-160000.1.1 * php8-zip-8.4.26-160000.1.1 * php8-ctype-8.4.26-160000.1.1 * php8-mysql-debuginfo-8.4.26-160000.1.1 * php8-enchant-8.4.26-160000.1.1 * php8-shmop-8.4.26-160000.1.1 * php8-sqlite-debuginfo-8.4.26-160000.1.1 * php8-embed-debuginfo-8.4.26-160000.1.1 * php8-xmlwriter-debuginfo-8.4.26-160000.1.1 * php8-embed-debugsource-8.4.26-160000.1.1 * php8-soap-8.4.26-160000.1.1 * php8-iconv-8.4.26-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php8-fpm-apache-8.4.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * php8-opcache-debuginfo-8.4.26-160000.1.1 * php8-sysvshm-8.4.26-160000.1.1 * php8-sysvshm-debuginfo-8.4.26-160000.1.1 * php8-sysvsem-debuginfo-8.4.26-160000.1.1 * apache2-mod_php8-8.4.26-160000.1.1 * php8-ffi-8.4.26-160000.1.1 * php8-intl-debuginfo-8.4.26-160000.1.1 * php8-posix-debuginfo-8.4.26-160000.1.1 * php8-shmop-debuginfo-8.4.26-160000.1.1 * php8-fpm-8.4.26-160000.1.1 * php8-calendar-8.4.26-160000.1.1 * php8-fileinfo-8.4.26-160000.1.1 * php8-sqlite-8.4.26-160000.1.1 * php8-odbc-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-debuginfo-8.4.26-160000.1.1 * php8-enchant-debuginfo-8.4.26-160000.1.1 * php8-fpm-debugsource-8.4.26-160000.1.1 * php8-opcache-8.4.26-160000.1.1 * php8-xmlwriter-8.4.26-160000.1.1 * php8-mbstring-8.4.26-160000.1.1 * php8-ftp-debuginfo-8.4.26-160000.1.1 * php8-mysql-8.4.26-160000.1.1 * php8-odbc-8.4.26-160000.1.1 * php8-debugsource-8.4.26-160000.1.1 * php8-curl-debuginfo-8.4.26-160000.1.1 * php8-bcmath-debuginfo-8.4.26-160000.1.1 * php8-pgsql-8.4.26-160000.1.1 * php8-tidy-8.4.26-160000.1.1 * php8-fastcgi-debuginfo-8.4.26-160000.1.1 * php8-xmlreader-debuginfo-8.4.26-160000.1.1 * php8-sysvmsg-8.4.26-160000.1.1 * php8-xsl-debuginfo-8.4.26-160000.1.1 * php8-embed-8.4.26-160000.1.1 * php8-bz2-debuginfo-8.4.26-160000.1.1 * php8-ldap-debuginfo-8.4.26-160000.1.1 * php8-gd-debuginfo-8.4.26-160000.1.1 * php8-pgsql-debuginfo-8.4.26-160000.1.1 * php8-readline-8.4.26-160000.1.1 * php8-gd-8.4.26-160000.1.1 * apache2-mod_php8-debugsource-8.4.26-160000.1.1 * php8-sysvsem-8.4.26-160000.1.1 * apache2-mod_php8-debuginfo-8.4.26-160000.1.1 * php8-ldap-8.4.26-160000.1.1 * php8-fastcgi-debugsource-8.4.26-160000.1.1 * php8-openssl-debuginfo-8.4.26-160000.1.1 * php8-cli-8.4.26-160000.1.1 * php8-ctype-debuginfo-8.4.26-160000.1.1 * php8-zlib-debuginfo-8.4.26-160000.1.1 * php8-intl-8.4.26-160000.1.1 * php8-debuginfo-8.4.26-160000.1.1 * php8-ffi-debuginfo-8.4.26-160000.1.1 * php8-ftp-8.4.26-160000.1.1 * php8-iconv-debuginfo-8.4.26-160000.1.1 * php8-sodium-debuginfo-8.4.26-160000.1.1 * php8-fileinfo-debuginfo-8.4.26-160000.1.1 * php8-tidy-debuginfo-8.4.26-160000.1.1 * php8-xsl-8.4.26-160000.1.1 * php8-zlib-8.4.26-160000.1.1 * php8-pdo-debuginfo-8.4.26-160000.1.1 * php8-soap-debuginfo-8.4.26-160000.1.1 * php8-sockets-debuginfo-8.4.26-160000.1.1 * php8-pdo-8.4.26-160000.1.1 * php8-sysvmsg-debuginfo-8.4.26-160000.1.1 * php8-snmp-debuginfo-8.4.26-160000.1.1 * php8-calendar-debuginfo-8.4.26-160000.1.1 * php8-snmp-8.4.26-160000.1.1 * php8-fpm-debuginfo-8.4.26-160000.1.1 * php8-pcntl-debuginfo-8.4.26-160000.1.1 * php8-dom-debuginfo-8.4.26-160000.1.1 * php8-gmp-debuginfo-8.4.26-160000.1.1 * php8-bcmath-8.4.26-160000.1.1 * php8-bz2-8.4.26-160000.1.1 * php8-fastcgi-8.4.26-160000.1.1 * php8-gettext-debuginfo-8.4.26-160000.1.1 * php8-gettext-8.4.26-160000.1.1 * php8-dba-debuginfo-8.4.26-160000.1.1 * php8-8.4.26-160000.1.1 * php8-mbstring-debuginfo-8.4.26-160000.1.1 * php8-dba-8.4.26-160000.1.1 * php8-posix-8.4.26-160000.1.1 * php8-phar-8.4.26-160000.1.1 * php8-cli-debuginfo-8.4.26-160000.1.1 * php8-devel-8.4.26-160000.1.1 * php8-xmlreader-8.4.26-160000.1.1 * php8-zip-debuginfo-8.4.26-160000.1.1 * php8-phar-debuginfo-8.4.26-160000.1.1 * php8-tokenizer-8.4.26-160000.1.1 * php8-exif-8.4.26-160000.1.1 * php8-exif-debuginfo-8.4.26-160000.1.1 * php8-dom-8.4.26-160000.1.1 * php8-readline-debuginfo-8.4.26-160000.1.1 * php8-sockets-8.4.26-160000.1.1 * php8-openssl-8.4.26-160000.1.1 * php8-pcntl-8.4.26-160000.1.1 * php8-curl-8.4.26-160000.1.1 * php8-gmp-8.4.26-160000.1.1 * php8-sodium-8.4.26-160000.1.1 * php8-zip-8.4.26-160000.1.1 * php8-ctype-8.4.26-160000.1.1 * php8-mysql-debuginfo-8.4.26-160000.1.1 * php8-enchant-8.4.26-160000.1.1 * php8-shmop-8.4.26-160000.1.1 * php8-sqlite-debuginfo-8.4.26-160000.1.1 * php8-embed-debuginfo-8.4.26-160000.1.1 * php8-xmlwriter-debuginfo-8.4.26-160000.1.1 * php8-embed-debugsource-8.4.26-160000.1.1 * php8-soap-8.4.26-160000.1.1 * php8-iconv-8.4.26-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php8-fpm-apache-8.4.26-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:39:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:39:54 -0000 Subject: SUSE-SU-2026:24157-1: important: Security update for bind Message-ID: <179206799472.22980.3796719080115227716@3bce49fe9f47> # Security update for bind Announcement ID: SUSE-SU-2026:24157-1 Release Date: 2026-10-07T09:32:20Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280439 * bsc#1280440 * bsc#1280441 * bsc#1280442 * bsc#1280443 * bsc#1280444 * bsc#1280445 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-76163 * CVE-2026-77119 * CVE-2026-77692 * CVE-2026-78301 * CVE-2026-80274 * CVE-2026-81563 * CVE-2026-81736 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-76163 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-76163 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76163 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77692 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77692 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81563 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81563 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81736 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81736 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-76163: named aborts on a TKEY query when the user configuration has no global options statement (bsc#1280439). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-77692: Unauthenticated remote crash of named via a single DoH SIG(0) request (bsc#1280441). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). * CVE-2026-81563: SVCB AliasMode additional-data error leaks qpcache references (bsc#1280444). * CVE-2026-81736: Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees (bsc#1280445). Changes for bind: * Upgrade to release 9.20.29 Feature Changes: * Reject oversized and malformed DNSKEY records up front. * Speed up RPZ policy zone updates. Bug Fixes: * Prevent a crash when using both dns64 and filter-a. * Stop passing UDP client addresses to update-policy external helpers. * Missing required NSEC3 for delegation not detected. * Tighten EUI48 and EUI64 text parsing. * GeoIP ACL state could be stale or wrong after reload. * Honor DNSSEC policy key tag ranges. * Fix a double free in mdig when EDNS options are specified. * Fix a crash when an IXFR falls back to AXFR with updates still pending. * Fix DS requests to parental agents over TLS. * Fix the rndc-confgen -q (quiet) option. * Enforce query ACLs for redirect zones and searched DLZs. * Check asnum validity in GeoIP ACLs. * Fix a crash on remote-servers lists that reference themselves. * A record from outside a response policy zone could crash named. * Invalid key-store configuration could abort the DNSSEC tools. * NSEC signature set could bypass the secure-delegation check. * Fix a possible nsupdate issue when using GSS-TSIG. * Fix a crash with a single-element geoip sortlist. * Prevent out-of-bailiwick CNAMEs from evicting cached records. * Restore periodic cleanup of stale resolver address data. * Fix named-checkconf/named crash with malformed key name. * Prevent resolver crashes while processing DNS over TCP. * Ensure NSEC authority does not cross zonecut boundary. * Treat an unusable NSEC3 chain as a verification failure. * Treat non-canonical RPZ prefixes as any other failure. * Negative caching stopped working with stale-answer-client-timeout set to 0. * An unterminated OpenSSL private-key Label: field could be read past its parser buffer. * Restore SMF support on Solaris and illumos. * Fix compilation on GNU/Hurd. * dig +yaml was producing invalid YAML when a lookup failed. * Properly prevent TSIG generation command line injection attacks. * Fix a potential heap bounds overflow write in dnssec-signzone. * Fix crashes on invalid DNSTAP input in dnstap-read. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1862 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1862 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * bind-modules-ldap-debuginfo-9.20.29-160000.1.1 * bind-utils-debuginfo-9.20.29-160000.1.1 * bind-debugsource-9.20.29-160000.1.1 * bind-modules-ldap-9.20.29-160000.1.1 * bind-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-9.20.29-160000.1.1 * bind-modules-generic-debuginfo-9.20.29-160000.1.1 * bind-utils-9.20.29-160000.1.1 * bind-modules-generic-9.20.29-160000.1.1 * bind-modules-sqlite3-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-debuginfo-9.20.29-160000.1.1 * bind-modules-sqlite3-9.20.29-160000.1.1 * bind-9.20.29-160000.1.1 * bind-modules-perl-9.20.29-160000.1.1 * bind-modules-perl-debuginfo-9.20.29-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * bind-doc-9.20.29-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * bind-modules-ldap-debuginfo-9.20.29-160000.1.1 * bind-utils-debuginfo-9.20.29-160000.1.1 * bind-debugsource-9.20.29-160000.1.1 * bind-modules-ldap-9.20.29-160000.1.1 * bind-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-9.20.29-160000.1.1 * bind-modules-generic-debuginfo-9.20.29-160000.1.1 * bind-utils-9.20.29-160000.1.1 * bind-modules-generic-9.20.29-160000.1.1 * bind-modules-sqlite3-debuginfo-9.20.29-160000.1.1 * bind-modules-mysql-debuginfo-9.20.29-160000.1.1 * bind-modules-sqlite3-9.20.29-160000.1.1 * bind-9.20.29-160000.1.1 * bind-modules-perl-9.20.29-160000.1.1 * bind-modules-perl-debuginfo-9.20.29-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * bind-doc-9.20.29-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-76163.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-77692.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://www.suse.com/security/cve/CVE-2026-81563.html * https://www.suse.com/security/cve/CVE-2026-81736.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280439 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280441 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 * https://bugzilla.suse.com/show_bug.cgi?id=1280444 * https://bugzilla.suse.com/show_bug.cgi?id=1280445 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:40:05 -0000 Subject: SUSE-SU-2026:24156-1: moderate: Security update for swtpm Message-ID: <179206800570.22980.13132691776181723588@3bce49fe9f47> # Security update for swtpm Announcement ID: SUSE-SU-2026:24156-1 Release Date: 2026-10-07T09:32:20Z Rating: moderate References: * bsc#1221342 * bsc#1251789 * bsc#1266339 * bsc#1271417 * bsc#1275653 Cross-References: * CVE-2026-75900 CVSS scores: * CVE-2026-75900 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-75900 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has four fixes can now be installed. ## Description: This update for swtpm fixes the following issues: Security issue fixed: * CVE-2026-75900: Out-of-bounds read in SWTPM_NVRAM_CheckHeader due to sizeof(pointer) vs sizeof(struct) mismatch (bsc#1275653). Changes for swtpm: Update to 0.10.2: * Properly check for truncation following snprintf call * add upstream signing key and validate source signature * Fix SELinux policy for virtqemud_t swtpm_t setsched process and unix socket interactions. Allows virtqemud_t to: Signal and control swtpm_t processes (noatsecure, rlimitinh, siginh, signull, setsched), create and listen on Unix stream sockets with swtpm_t processes (bsc#1266339). Already accepted on upstream: https://github.com/stefanberger/swtpm/pull/1132 * Drop tunable in require to avoid policy loading issues with toolchain 3.11 (bsc#1271417). Can be dropped, once this is accepted upstream: https://github.com/stefanberger/swtpm/pull/1139 * Update SELinux module dir as macro to allow root path move from /var/lib/selinux to /etc/selinux (bsc#1221342) * Also load swtpm_libvirt in the selinux subpackage (bsc#1251789) * Update to version 0.10.1: * swtpm: Fix build error on 32bit systems due to inconsistent _FILE_OFFSET_BITS. * swtpm_setup: * Use DISTRO_PROFILES_DIR when listing profiles (fix path issue). * Do not pass a TPM 2 profile to swtpm when reconfiguring. * selinux: * Add rule for swtpm to be able to read password from pipe. * allow to map state file. * add NFS permissions for swtpm_t. * Add rule to allow swtpm_t opening of virt_log_t files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1861 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1861 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * swtpm-selinux-0.10.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * swtpm-debuginfo-0.10.2-160000.1.1 * swtpm-0.10.2-160000.1.1 * swtpm-debugsource-0.10.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * swtpm-selinux-0.10.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-75900.html * https://bugzilla.suse.com/show_bug.cgi?id=1221342 * https://bugzilla.suse.com/show_bug.cgi?id=1251789 * https://bugzilla.suse.com/show_bug.cgi?id=1266339 * https://bugzilla.suse.com/show_bug.cgi?id=1271417 * https://bugzilla.suse.com/show_bug.cgi?id=1275653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:40:30 -0000 Subject: SUSE-SU-2026:24154-1: moderate: Security update for busybox Message-ID: <179206803024.22980.10778449134367686532@3bce49fe9f47> # Security update for busybox Announcement ID: SUSE-SU-2026:24154-1 Release Date: 2026-10-06T16:10:21Z Rating: moderate References: * bsc#1217586 * bsc#1271544 * bsc#1271545 * bsc#1271547 * bsc#1271548 Cross-References: * CVE-2023-42366 * CVE-2026-38752 * CVE-2026-38753 * CVE-2026-38754 * CVE-2026-38755 CVSS scores: * CVE-2023-42366 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2023-42366 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-38752 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38752 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-38752 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38752 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-38753 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-38753 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-38753 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-38753 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38754 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38754 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-38754 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38754 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-38755 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-38755 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-38755 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-38755 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586). * CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544). * CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545). * CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547). * CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1856 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1856 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * busybox-debuginfo-1.37.0-160000.7.1 * busybox-1.37.0-160000.7.1 * busybox-static-debuginfo-1.37.0-160000.7.1 * busybox-static-1.37.0-160000.7.1 * busybox-debugsource-1.37.0-160000.7.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.7.1 * busybox-warewulf3-1.37.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * busybox-debuginfo-1.37.0-160000.7.1 * busybox-1.37.0-160000.7.1 * busybox-static-debuginfo-1.37.0-160000.7.1 * busybox-static-1.37.0-160000.7.1 * busybox-debugsource-1.37.0-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.7.1 * busybox-warewulf3-1.37.0-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2023-42366.html * https://www.suse.com/security/cve/CVE-2026-38752.html * https://www.suse.com/security/cve/CVE-2026-38753.html * https://www.suse.com/security/cve/CVE-2026-38754.html * https://www.suse.com/security/cve/CVE-2026-38755.html * https://bugzilla.suse.com/show_bug.cgi?id=1217586 * https://bugzilla.suse.com/show_bug.cgi?id=1271544 * https://bugzilla.suse.com/show_bug.cgi?id=1271545 * https://bugzilla.suse.com/show_bug.cgi?id=1271547 * https://bugzilla.suse.com/show_bug.cgi?id=1271548 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:40:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:40:37 -0000 Subject: SUSE-SU-2026:24153-1: important: Security update for distribution Message-ID: <179206803745.22980.11385733060314827944@3bce49fe9f47> # Security update for distribution Announcement ID: SUSE-SU-2026:24153-1 Release Date: 2026-10-06T15:08:34Z Rating: important References: * bsc#1283762 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for distribution fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283762). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1855 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1855 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * distribution-registry-3.1.1-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283762 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:41:05 -0000 Subject: SUSE-SU-2026:24150-1: important: Security update for amazon-ecs-init Message-ID: <179206806529.22980.11484319310549058776@3bce49fe9f47> # Security update for amazon-ecs-init Announcement ID: SUSE-SU-2026:24150-1 Release Date: 2026-10-06T14:54:50Z Rating: important References: * bsc#1276744 * bsc#1279231 * bsc#1279329 Cross-References: * CVE-2026-41178 * CVE-2026-84303 * CVE-2026-84304 CVSS scores: * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84303 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-84303 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-84303 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for amazon-ecs-init fixes the following issues: * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276744). * CVE-2026-84303: google.golang.org/grpc: xDS RBAC HTTP filter implementation issue allows for bypass of authorization policies via mixed-case or canonical-case header matches (bsc#1279329). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279231). Changes for amazon-ecs-init: * Update to version 1.107.0 * Feature - Add MPS GPU Sharing capability (#5139) * Enhancement - Add MPS control daemon health gate task resource (#5107) * Enhancement - Surface MPS control-daemon impairment reason as StatusReason (#5125) * Enhancement - Attach the MPS control daemon health gate to MPS tasks (#5119) * Enhancement - Add ACCELERATED_COMPUTE health check for the MPS control daemon (#5124) * Enhancement - Fetch GPG keys from S3 instead of GitHub in ECS Anywhere install script (#5130) * Enhancement - Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent (#5117) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.20.4 in /agent (#5128) * Enhancement - Bump github.com/containerd/containerd from 1.7.33 to 1.7.35 in /ecs-init (#5133) * Enhancement - Bump google.golang.org/grpc from 1.82.1 to 1.83.1, this also updated go.opentelemetry.io/otel to v1.44.0 in /ecs-agent, /ecs- agent/daemonimages/csidriver and /agent (#5123) * Enhancement - Bump k8s.io/api from 0.28.1 to 0.37.0 in /agent (#5118) * Enhancement - Correct broken systemd link in README (#5129) * Enhancement - Bump golang.org/x/text and related dependencies (#5100) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.33 to 1.18.38 in /ecs-agent (#5093) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.35.2 to 1.44.7 in /agent (#5094) * Enhancement - Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 (#5108) * Enhancement - Update Go version to 1.26.7 (#5105) * Enhancement - Add amazon-ecs-agent.gpg and amazon-ssm-agent.gpg to the CodePipeline release artifacts (#5101) * Enhancement - IMDS credentials scanner/refresher: Add logging and validations (#5091) * Enhancement - Bump github.com/containerd/cgroups/v3 from 3.0.4 to 3.1.3 in /agent (#5081) * Enhancement - Bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /ecs- agent and /agent (#5085) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.32 in /ecs-agent, /agent and /ecs-init (#5080) * Bugfix - fix(handlers): raise fault rate limit to 1 rps (#5092) * Feature - Nvidia MPS GPU sharing (not yet enabled) * Add MPS control-daemon health probe (#5095) * Add per-GPU memory accounting to host resource manager (#5090) * Allow MPS containers to colocate on a shared GPU (#5083) * Mount MPS control binary and pipe dir into the agent container (#5086) * Move MPS pipe directory to /run/mps-ecs (#5102) * Enhancement - Add retry for EFS volume creation to handle plugin timeout errors caused by concurrent mount operation (#5077) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.32.23 to 1.32.31 in /agent (#5064) * Enhancement - Bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /ecs- agent/daemonimages/csidriver (#5056) * Enhancement - Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /ecs-agent (#5063) * Enhancement - add nos3readcache S3 Files mount option (#5062) * Add ecs.capability.gpu-sharing-mps capability for NVIDIA MPS GPU sharing (#5053) * Inject NVIDIA MPS env vars and pipe mount into MPS containers (#5082) * Map ACS GPU sharingStrategy onto the internal container model for MPS (#5076) * Gate gpu-sharing-mps on complete per-GPU memory- (#5075) (#5075) * Regenerate ACS model for GPU sharingStrategy and validate it (#5071) * Report per-GPU memory at container instance registration for GPU sharing (#5061) * Regenerate ECS SDK with gpuInfo on PlatformDevice (#5060) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1851 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1851 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * amazon-ecs-init-1.107.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * amazon-ecs-init-1.107.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-84303.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://bugzilla.suse.com/show_bug.cgi?id=1276744 * https://bugzilla.suse.com/show_bug.cgi?id=1279231 * https://bugzilla.suse.com/show_bug.cgi?id=1279329 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:41:23 -0000 Subject: SUSE-SU-2026:24149-1: important: Security update for jackson-annotations, jackson-core, jackson-databind Message-ID: <179206808342.22980.7351468349992149905@3bce49fe9f47> # Security update for jackson-annotations, jackson-core, jackson-databind Announcement ID: SUSE-SU-2026:24149-1 Release Date: 2026-10-06T14:12:46Z Rating: important References: * bsc#1273856 * bsc#1273857 * bsc#1277883 * bsc#1278008 * bsc#1280125 * bsc#1282491 * bsc#1282492 * bsc#1282505 * bsc#1282641 * bsc#1282645 Cross-References: * CVE-2026-18401 * CVE-2026-19032 * CVE-2026-68494 * CVE-2026-68497 * CVE-2026-68498 * CVE-2026-83557 * CVE-2026-89407 * CVE-2026-89425 * CVE-2026-91776 * CVE-2026-91777 CVSS scores: * CVE-2026-18401 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18401 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18401 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19032 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19032 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-19032 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-68494 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68494 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68494 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-68497 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68497 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68497 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68498 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-83557 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-83557 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-83557 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89407 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89407 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89425 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89425 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91776 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-91776 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-91776 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91777 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for jackson-annotations, jackson-core, jackson-databind fixes the following issues: * CVE-2026-18401: Number Length Constraint Bypass in Async Parser Can Lead to Potential Processing Time Issues (bsc#1273856). * CVE-2026-19032: deserializer for `java.nio.file.Path` resolves attacker- supplied URIs without restricting the URI scheme (bsc#1277883). * CVE-2026-68494: Async parser maxNumberLength bypass via chunked digit accumulation (bsc#1273857). * CVE-2026-68497: An unauthenticated attacker can therefore submit a single request of a few megabytes (bsc#1280125). * CVE-2026-68498: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641). * CVE-2026-83557: incomplete `PolymorphicTypeValidator` denylist allows for arbitrary `Comparable` deserialization (bsc#1278008). * CVE-2026-89407: Optimize NumberInput.looksLikeValidNumber (bsc#1282645). * CVE-2026-89425: `UTF8DataInputJsonParser._reportInvalidToken()`lacks `maxErrorTokenLength` limit, which allows for unbounded `StringBuilder` growth and can lead to a DoS when malformed tokens are processed (bsc#1282505). * CVE-2026-91776: `TypeDeserializerBase._findDeserializer()` caches the resolved deserializer under the raw, attacker- supplied type ID, which can lead to unbounded cache growth under certain configurations (bsc#1282491). * CVE-2026-91777: forward-reference completion for `@JsonIdentityInfo` object IDs performs a linear scan of the pending- reference accumulator for every resolved ID, which can lead to quadratic CPU work during deserialization (bsc#1282492). Changes for jackson-annotations: * Update to 2.18.11 Changes for jackson-core: * Update to 2.18.11 * # 1649: Optimize NumberInput.looksLikeValidNumber (bsc#1282645, CVE-2026-89407) * # 1698: UTF8DataInputJsonParser does not honor maxErrorTokenLength when reporting an unrecognized token (bsc#1282505, CVE-2026-89425) * # 1642: Fix maxDocumentLength bypass in async parser single-feedInput() case [GHSA-2c4j-63jj-9fqr] * # 1643: Enforce maxNameLength incrementally in ReaderBasedJsonParser (bsc#1282641, CVE-2026-68498) of async parser (bsc#1273857, CVE-2026-68494) non-blocking (async) parser (bsc#1273856, CVE-2026-18401) Changes for jackson-databind: * Update to 2.18.11 * # 6185: Bracket unresolved IPv6 host name in InetSocketAddress serialization * # 6203: Prevent unbounded growth of type id cache in TypeDeserializer (bsc#1282491, CVE-2026-91776) * # 6204: Avoid quadratic forward-reference resolution in Collection/Map deserializers (bsc#1282492, CVE-2026-91777) * # 6099: Resolve classes without initialization in TypeFactory.findClass() * # 6116: Reject non-ASCII digits in InetAddress literal validation * # 6127: Add StreamReadConstraints number len constraint to javax.xml.datatype.XMLGregorianCalendar and javax.xml.datatype.Duration (bsc#1280125, CVE-2026-68497) * # 6129: Limit the supported URL schemes for java.nio.file.Path deserialization (bsc#1277883, CVE-2026-19032) * # 6156: Add java.lang.Comparable in set of unsafe polymorphic base types (bsc#1278008, CVE-2026-83557) * # 6165: Apply number length limits to BigDecimal/BigInteger/ /Double/Float Map keys ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1850 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1850 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * jackson-annotations-2.18.11-160000.1.1 * jackson-databind-javadoc-2.18.11-160000.1.1 * jackson-databind-2.18.11-160000.1.1 * jackson-core-2.18.11-160000.1.1 * jackson-core-javadoc-2.18.11-160000.1.1 * jackson-annotations-javadoc-2.18.11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * jackson-annotations-2.18.11-160000.1.1 * jackson-databind-javadoc-2.18.11-160000.1.1 * jackson-databind-2.18.11-160000.1.1 * jackson-core-2.18.11-160000.1.1 * jackson-core-javadoc-2.18.11-160000.1.1 * jackson-annotations-javadoc-2.18.11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18401.html * https://www.suse.com/security/cve/CVE-2026-19032.html * https://www.suse.com/security/cve/CVE-2026-68494.html * https://www.suse.com/security/cve/CVE-2026-68497.html * https://www.suse.com/security/cve/CVE-2026-68498.html * https://www.suse.com/security/cve/CVE-2026-83557.html * https://www.suse.com/security/cve/CVE-2026-89407.html * https://www.suse.com/security/cve/CVE-2026-89425.html * https://www.suse.com/security/cve/CVE-2026-91776.html * https://www.suse.com/security/cve/CVE-2026-91777.html * https://bugzilla.suse.com/show_bug.cgi?id=1273856 * https://bugzilla.suse.com/show_bug.cgi?id=1273857 * https://bugzilla.suse.com/show_bug.cgi?id=1277883 * https://bugzilla.suse.com/show_bug.cgi?id=1278008 * https://bugzilla.suse.com/show_bug.cgi?id=1280125 * https://bugzilla.suse.com/show_bug.cgi?id=1282491 * https://bugzilla.suse.com/show_bug.cgi?id=1282492 * https://bugzilla.suse.com/show_bug.cgi?id=1282505 * https://bugzilla.suse.com/show_bug.cgi?id=1282641 * https://bugzilla.suse.com/show_bug.cgi?id=1282645 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:41:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:41:50 -0000 Subject: SUSE-SU-2026:24148-1: important: Security update for alloy Message-ID: <179206811086.22980.10763401688174610301@3bce49fe9f47> # Security update for alloy Announcement ID: SUSE-SU-2026:24148-1 Release Date: 2026-10-06T13:15:27Z Rating: important References: * bsc#1267482 * bsc#1267483 * bsc#1267484 * bsc#1267486 * bsc#1267487 * bsc#1268982 * bsc#1269861 * bsc#1272028 * bsc#1272418 * bsc#1276742 * bsc#1276982 * bsc#1276992 * bsc#1277429 * bsc#1277996 * bsc#1278671 * bsc#1278693 * bsc#1280671 Cross-References: * CVE-2026-2303 * CVE-2026-37236 * CVE-2026-41178 * CVE-2026-45679 * CVE-2026-45680 * CVE-2026-45681 * CVE-2026-45683 * CVE-2026-45684 * CVE-2026-46600 * CVE-2026-48496 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-71556 * CVE-2026-71557 * CVE-2026-75889 * CVE-2026-78662 * CVE-2026-81521 * CVE-2026-89090 CVSS scores: * CVE-2026-2303 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-2303 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-2303 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-37236 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-37236 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-37236 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45679 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-45679 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45679 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-45680 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45680 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45681 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45681 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45681 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-45683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45683 ( NVD ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N * CVE-2026-45684 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-45684 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-45684 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-46600 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46600 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-48496 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71556 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71556 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-71557 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-71557 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L * CVE-2026-75889 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-75889 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-75889 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81521 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-81521 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81521 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 19 vulnerabilities can now be installed. ## Description: This update for alloy fixes the following issues: * CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of- Bounds Read in GSSAPI Error Handling (bsc#1269861). * CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request through the X-HTTP-Method- Override header and bypass established access control (bsc#1277996). * CVE-2026-41178: go.opentelemetry.io/otel/baggage: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276742). * CVE-2026-45679: go.opentelemetry.io/obi: Redis error text is exported in span status messages and can lead to exfiltration of sensitive data (bsc#1267482). * CVE-2026-45680: go.opentelemetry.io/obi: unbounded BPF internal metrics replay can exhaust CPU and cause a DoS (bsc#1267483). * CVE-2026-45681: go.opentelemetry.io/obi: CPU-mismatch fallback uses 256-byte buffer with 8KB size and can cause OBI out-of-bounds reads to leak memory into telemetry (bsc#1267484). * CVE-2026-45683: go.opentelemetry.io/obi: Java TLS ioctl kprobe allows a user to point OBI at kernel memory and cause that memory to be copied into telemetry (bsc#1267486). * CVE-2026-45684: go.opentelemetry.io/obi: log enricher mishandled `writev` buffers and allows multi-segment calls to read and overwrite memory beyond the first segment (bsc#1267487). * CVE-2026-46600: golang.org/x/net/dns/dnsmessage: Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer (bsc#1272418). * CVE-2026-48496: opentelemetry-ebpf-profiler: Unprivileged process can trigger a denial of service on the ebpf-profiler agent (bsc#1268982). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272028). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278671). * CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution (bsc#1276982). * CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage (bsc#1276992). * CVE-2026-75889: arbitrary file reads due to the `prometheus.operator.servicemonitors` component allowing users who can modify `ServiceMonitor` resources in a watched namespace to specify an arbitrary local file through `bearerTokenFile` (bsc#1277429). * CVE-2026-81521: go.mongodb.org/mongo-driver: MongoDB Go Driver: Write redirection via unvalidated database name in Client.BulkWrite (bsc#1278693). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280671). Changes for alloy: Update to version 1.19.2: * Remove withdrawn lib/pq CVEs from govulncheck * Add backticks to component name in generated doc output * BREAKING CHANGE: prometheus.operator.servicemonitors now rejects endpoints that reference local files by default. Set allow_arbitrary_file_access = true to preserve previous behavior. * prometheus.enrich: Support multi-label matching * prometheus.relabel: Add opt-in TTL cache mode * telemetry: Add new metrics for graph connections and pyroscope forwarded entries * database_observability: Exclude system schemas from MySQL health checks and redact query text in explain_plans * Add nop receiver to OTel Engine * Backport dependency upgrades to address GO-2026-6061 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1848 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1848 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * alloy-debuginfo-1.19.2-160000.1.1 * alloy-1.19.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * alloy-debuginfo-1.19.2-160000.1.1 * alloy-1.19.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-2303.html * https://www.suse.com/security/cve/CVE-2026-37236.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-45679.html * https://www.suse.com/security/cve/CVE-2026-45680.html * https://www.suse.com/security/cve/CVE-2026-45681.html * https://www.suse.com/security/cve/CVE-2026-45683.html * https://www.suse.com/security/cve/CVE-2026-45684.html * https://www.suse.com/security/cve/CVE-2026-46600.html * https://www.suse.com/security/cve/CVE-2026-48496.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-71556.html * https://www.suse.com/security/cve/CVE-2026-71557.html * https://www.suse.com/security/cve/CVE-2026-75889.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81521.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1267482 * https://bugzilla.suse.com/show_bug.cgi?id=1267483 * https://bugzilla.suse.com/show_bug.cgi?id=1267484 * https://bugzilla.suse.com/show_bug.cgi?id=1267486 * https://bugzilla.suse.com/show_bug.cgi?id=1267487 * https://bugzilla.suse.com/show_bug.cgi?id=1268982 * https://bugzilla.suse.com/show_bug.cgi?id=1269861 * https://bugzilla.suse.com/show_bug.cgi?id=1272028 * https://bugzilla.suse.com/show_bug.cgi?id=1272418 * https://bugzilla.suse.com/show_bug.cgi?id=1276742 * https://bugzilla.suse.com/show_bug.cgi?id=1276982 * https://bugzilla.suse.com/show_bug.cgi?id=1276992 * https://bugzilla.suse.com/show_bug.cgi?id=1277429 * https://bugzilla.suse.com/show_bug.cgi?id=1277996 * https://bugzilla.suse.com/show_bug.cgi?id=1278671 * https://bugzilla.suse.com/show_bug.cgi?id=1278693 * https://bugzilla.suse.com/show_bug.cgi?id=1280671 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:42:10 -0000 Subject: SUSE-SU-2026:24145-1: important: Security update for libXtst Message-ID: <179206813000.22980.16725347542831765696@3bce49fe9f47> # Security update for libXtst Announcement ID: SUSE-SU-2026:24145-1 Release Date: 2026-10-06T12:59:19Z Rating: important References: * bsc#1281665 Cross-References: * CVE-2026-94286 CVSS scores: * CVE-2026-94286 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94286 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94286 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libXtst fixes the following issue: * CVE-2026-94286: out-of-bounds read in libXtst's RECORD reply parser (bsc#1281665). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1847 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1847 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXtst6-debuginfo-1.2.5-160000.4.1 * libXtst-devel-1.2.5-160000.4.1 * libXtst-debugsource-1.2.5-160000.4.1 * libXtst6-1.2.5-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXtst6-debuginfo-1.2.5-160000.4.1 * libXtst-devel-1.2.5-160000.4.1 * libXtst-debugsource-1.2.5-160000.4.1 * libXtst6-1.2.5-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94286.html * https://bugzilla.suse.com/show_bug.cgi?id=1281665 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:42:15 -0000 Subject: SUSE-SU-2026:24144-1: important: Security update for wpa_supplicant Message-ID: <179206813563.22980.18059056704513322135@3bce49fe9f47> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24144-1 Release Date: 2026-10-05T17:48:33Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issues: Security issues fixed: * CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1833 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1833 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 * wpa_supplicant-debugsource-2.11-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-2.11-160000.5.1 * wpa_supplicant-debuginfo-2.11-160000.5.1 * wpa_supplicant-debugsource-2.11-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:42:28 -0000 Subject: SUSE-SU-2026:24142-1: moderate: Security update for govulncheck-vulndb Message-ID: <179206814813.22980.15035337900257571933@3bce49fe9f47> # Security update for govulncheck-vulndb Announcement ID: SUSE-SU-2026:24142-1 Release Date: 2026-10-05T12:29:06Z Rating: moderate References: * jsc#PED-11136 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that contains one feature can now be installed. ## Description: This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20261001T202415 2026-10-01T20:24:15Z (jsc#PED-11136): * GO-2024-2584 GHSA-86h5-xcpx-cfqc * GO-2026-5544 GHSA-pjv4-3c63-699f * GO-2026-6480 GHSA-2g8v-grq3-hq2g * GO-2026-6481 GHSA-g5vr-6pgg-74qv * GO-2026-6482 GHSA-h998-hxxj-8q83 * GO-2026-6483 GHSA-jqgv-39mg-7c2r * GO-2026-6484 GHSA-mxq2-5jpg-7474 * GO-2026-6485 GHSA-r8cr-4f9w-7r75 * GO-2026-6486 GHSA-rf68-8gjr-36q7 * GO-2026-6487 GHSA-4595-rvpx-4q34 * GO-2026-6488 GHSA-g3pg-frfm-pr2m * GO-2026-6490 GHSA-9468-v6mj-fppw * GO-2026-6491 GHSA-27gv-rfvv-22mv * GO-2026-6492 GHSA-33mj-cw25-m34h * GO-2026-6493 GHSA-465g-fh3v-9jw4 * GO-2026-6494 GHSA-4v58-74mf-rjx3 * GO-2026-6495 GHSA-5gpm-rgj3-9q76 * GO-2026-6496 GHSA-c5pq-fr2g-9jpf * GO-2026-6497 GHSA-h7vf-4x9w-h99v * GO-2026-6498 GHSA-j497-x9hr-x34x * GO-2026-6499 GHSA-m37j-52j7-pjw7 * GO-2026-6500 GHSA-r9c8-gcjp-xfwh * GO-2026-6502 GHSA-rm6m-hrcw-jw33 * GO-2026-6503 GHSA-xwwf-m8fg-p9q2 * GO-2026-6505 GHSA-8wmf-6v46-5gfg * GO-2026-6506 GHSA-9gm5-9rfh-m6vx * GO-2026-6507 GHSA-mrg3-qvqr-jw29 * GO-2026-6508 GHSA-w34q-cm8f-9c5x * GO-2026-6512 GHSA-j8px-rmrx-76h9 * GO-2026-6514 GHSA-4227-9989-jrhx * GO-2026-6515 GHSA-5gm3-9crp-6g3v * GO-2026-6516 GHSA-5p54-whvp-x327 * GO-2026-6517 GHSA-c8w2-fgvx-vhv4 * GO-2026-6518 GHSA-cjgj-2fwf-4c2w * GO-2026-6519 GHSA-f94q-w3w8-cj67 * GO-2026-6520 GHSA-gjw4-3v3v-rqxg * GO-2026-6521 GHSA-gxjc-74v5-3vx3 * GO-2026-6522 GHSA-jgh3-fggc-mcpm * GO-2026-6523 GHSA-p5vg-v7mj-f6q4 * GO-2026-6525 GHSA-pr6h-vr44-xq8j * GO-2026-6526 GHSA-qg2g-g9w3-m5h8 * GO-2026-6527 GHSA-qg67-7m6v-qg25 * GO-2026-6528 GHSA-vr5f-w35q-98jp * GO-2026-6529 GHSA-w72w-9qmj-c9qm * GO-2026-6530 GHSA-xwmw-prc4-v3cr * GO-2026-6535 GHSA-phg3-3g28-wq9v * GO-2026-6537 GHSA-hf33-q6cf-c66f * GO-2026-6538 GHSA-jhjp-4c2q-xmx4 * GO-2026-6539 GHSA-jr34-h97m-9hpx * GO-2026-6540 GHSA-pxcx-fv34-x9p5 * GO-2026-6541 GHSA-3w66-95m3-8jxg * GO-2026-6542 GHSA-9g84-39mm-q4p3 * GO-2026-6543 GHSA-crm4-q7v4-c2r2 * GO-2026-6544 GHSA-f74p-cwhp-x2wx * GO-2026-6545 GHSA-9493-h4f5-633x * GO-2026-6547 GHSA-xmfh-3ccg-c9fx * GO-2026-6548 GHSA-65gg-g7rw-6cpc * GO-2026-6549 GHSA-cqxr-jxr2-85pq * GO-2026-6550 GHSA-pg59-5vwg-4jxq * GO-2026-6552 GHSA-328g-jx67-v94g * GO-2026-6553 GHSA-34fc-gh42-pj53 * GO-2026-6554 GHSA-444v-8vxr-p36h * GO-2026-6555 GHSA-456h-ww26-f758 * GO-2026-6556 GHSA-59w7-v8rr-pr4p * GO-2026-6557 GHSA-5jpj-293f-rhvj * GO-2026-6558 GHSA-8fcf-v89g-xpg6 * GO-2026-6559 GHSA-8h6x-h86x-75wh * GO-2026-6560 GHSA-992g-9cr3-vm5x * GO-2026-6561 GHSA-9q4h-f4x5-ffq8 * GO-2026-6563 GHSA-9vm9-pqxx-x83v * GO-2026-6564 GHSA-9xhm-w3wj-xhqh * GO-2026-6565 GHSA-fjwv-jf2v-j499 * GO-2026-6566 GHSA-fq95-v8xc-jm3v * GO-2026-6567 GHSA-g26x-m427-f48f * GO-2026-6568 GHSA-gfjv-gqf2-c888 * GO-2026-6569 GHSA-gfw4-49f9-cp25 * GO-2026-6570 GHSA-jpf4-98qj-qr67 * GO-2026-6571 GHSA-jpvm-9frm-hjcq * GO-2026-6572 GHSA-jvh5-97xg-v99f * GO-2026-6573 GHSA-m3c6-2p7h-cfr3 * GO-2026-6574 GHSA-qgw5-7j4f-fg97 * GO-2026-6575 GHSA-vxg7-f2jj-jmqm * GO-2026-6576 GHSA-w89x-c962-c44g * GO-2026-6577 GHSA-xhmx-w2j4-rw3q * GO-2026-6578 GHSA-xj3h-wwxq-gfcj * GO-2026-6579 GHSA-xp3c-3jw3-4vcr * GO-2026-6581 GHSA-4fwh-wrm6-97xm * GO-2026-6582 GHSA-97cv-x867-6xhm * GO-2026-6583 GHSA-9v8p-frvj-2pcm * GO-2026-6584 GHSA-26r5-4mm2-px5c * GO-2026-6585 GHSA-7c7c-373r-gfjj * GO-2026-6586 GHSA-9wh6-9hq7-9688 * GO-2026-6588 GHSA-fx76-2j3w-2mx6 * GO-2026-6589 GHSA-9993-rfwp-rhwf * GO-2026-6590 GHSA-9xm2-gw56-wj7m * GO-2026-6591 GHSA-fgmf-7rf8-m6vf * GO-2026-6592 GHSA-xcw9-qmmf-vqxj * GO-2026-6594 GHSA-4hq8-gpf5-8p68 * GO-2026-6595 GHSA-w3rp-4cm2-4wgc * GO-2026-6596 GHSA-w7c2-w76w-5hmj * GO-2026-6597 GHSA-pg57-6jwg-q645 * GO-2026-6615 GHSA-hjf4-fphr-2h65 * GO-2026-6616 GHSA-p9f8-wvj8-2fg8 * GO-2026-6619 GHSA-87x6-8m9v-g8c2 * GO-2026-6620 GHSA-mvmf-94v6-879g ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1827 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1827 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * govulncheck-vulndb-0.0.20261001T202415-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * govulncheck-vulndb-0.0.20261001T202415-160000.1.1 ## References: * https://jira.suse.com/browse/PED-11136 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:42:41 -0000 Subject: SUSE-SU-2026:4678-1: important: Security update for iperf Message-ID: <179206816169.22980.8493674215798161068@3bce49fe9f47> # Security update for iperf Announcement ID: SUSE-SU-2026:4678-1 Release Date: 2026-10-15T07:27:45Z Rating: important References: * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1284404 * bsc#1284405 Cross-References: * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-71217 * CVE-2026-71218 CVSS scores: * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4678 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4678 ## Package List: * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * iperf-debuginfo-3.22-150000.3.18.1 * libiperf0-debuginfo-3.22-150000.3.18.1 * iperf-debugsource-3.22-150000.3.18.1 * libiperf0-3.22-150000.3.18.1 * iperf-3.22-150000.3.18.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * iperf-debuginfo-3.22-150000.3.18.1 * iperf-devel-3.22-150000.3.18.1 * libiperf0-debuginfo-3.22-150000.3.18.1 * iperf-debugsource-3.22-150000.3.18.1 * libiperf0-3.22-150000.3.18.1 * iperf-3.22-150000.3.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 12:42:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 12:42:52 -0000 Subject: SUSE-SU-2026:4677-1: important: Security update for the Java stack Message-ID: <179206817268.22980.4364076425452054686@3bce49fe9f47> # Security update for the Java stack Announcement ID: SUSE-SU-2026:4677-1 Release Date: 2026-10-15T05:56:27Z Rating: important References: * bsc#1188469 * bsc#1246873 * bsc#1273185 * bsc#1280015 Cross-References: * CVE-2021-36374 * CVE-2025-7962 * CVE-2026-78254 CVSS scores: * CVE-2021-36374 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2021-36374 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2025-7962 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2025-7962 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2025-7962 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-7962 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78254 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78254 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78254 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant (Updated to version 1.10.18): * Security issues fixed: * CVE-2021-36374: Fixed excessive memory allocation when reading specially crafted ZIP archives or derived formats (bsc#1188469) * CVE-2025-7962: Fixed improper neutralization of line breaks to prevent SMTP injection (bsc#1246873) * CVE-2026-78254: Fixed path traversal in FTP and SCP tasks that could allow arbitrary file writes (bsc#1280015) * Other changes and bugs fixed: * Breaking changes: * FTPS tasks now use encrypted data channels by default. * FTP and SCP tasks now prevent files or directories from being written outside the target directory by default. * Other changes: * Added package `ant-junit5` that allows tests to be launched and run using the JUnit 5 framework. * Improved support for reproducible builds by standardizing timestamps, file modification times, and timezone handling. * Upgraded the jakarta.mail dependency to version 2.0.2. * Added an option to the "record" task to create log files relative to the project directory. * Bugs fixed: * Fixed compatibility and startup issues when running on newer Java versions. * Fixed network handling issues in FTP and SCP tasks, including proper support for IPv6 addresses. * Improved security in email tasks by verifying TLS server certificates and enforcing STARTTLS encryption. * Improved report generation performance in JUnit launcher tasks. * Fixed regressions and edge cases in resource mapping, path conversion, and command execution. json-simple (Updated to version 2.3.1): * Updated to a newer version that makes reading and writing structured web data (JSON) safer and more reliable. * Added a "pretty-printing" feature to format web data so it is easier to read. * Made reading and writing data safer when multiple tasks are running simultaneously. * Made looking up data more flexible, allowing the tool to automatically handle different format types (like numbers and text). junit5 (Updated to version 5.14.4): * Fixed an issue where tests could conflict or run incorrectly when executed at the same time. * Corrected test behavior on newer versions of Java so they run reliably. * Improved test reports so that test names are clearer, unique, and easier to distinguish from one another. * Added features to customize how test names are generated and better capture testing outputs. maven-doxia, maven-doxia-sitetools (Updated to version 2.1.0): * Added support for displaying the last modification date and author on generated web pages. * Added support for displaying interactive diagrams (such as flowcharts or charts) directly on web pages. * Improved formatting and layout for modern documents, including better tables, lists, and links. maven-surefire, maven-surefire-plugins (Updated to version 3.5.6): * Fixed a bug that caused software testing tasks to fail abruptly with an unexpected error [bsc#1273185]. * Added timestamps to testing reports so you can see exactly when tests ran. * Made running multiple tests at the same time much more reliable, preventing mixed-up report results. * Added the ability to immediately stop testing once a failure is detected (saving time). objectweb-asm (Updated to version 9.10.1): * Added support for newer Java versions, including bytecode support up to Java 27. * Prevented out-of-memory errors when processing invalid or corrupted class files. * Improved bytecode analysis and verification to correctly handle valid Java code and prevent unexpected analysis errors * Improved compliance with FIPS 140-3 security standards during class serialization. * Corrected package import ranges to prevent dependency conflicts in OSGi environments. * Fixed unexpected crashes and errors in code generation and inspection utilities. plexus-archiver (Updated to version 4.14.0): * Added support for following symbolic links when collecting files for archives. * Reduced memory usage when creating ZIP archives to prevent out-of-memory errors during large builds. * Fixed an issue where reading file attributes on Windows systems could cause unexpected errors. * Improved ZIP archive handling, fixing checksum calculation errors, negative timestamp issues, and file permissions. * Replaced compression components with Apache Commons Compress to eliminate vulnerable dependencies. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including commons-io to 2.22.0, xz to 1.12, and zstd- jni to 1.5.7-15. plexus-build-api (Updated to version 1.2.0): * Updated dependencies for compatibility with modern build and injection tools. plexus-cipher (Updated to version 2.1.0): * Updated dependencies for compatibility with modern build and injection tools. plexus-classworlds (Updated to version 2.12.1): * Fixed file pattern matching (glob matching) when loading classes and resources. * Restored backward compatibility with legacy Maven 2 configurations. * Added support for registering filtered class realms. * Implemented clean resource shutdown support (Closeable) for class loaders. * Added support for the PPC64LE architecture. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including jakarta.xml.bind-api, log4j-api, and ant. plexus-compiler (Updated to version 2.17.1): * Fixed a security issue (Zip Slip) that could allow arbitrary file overwrite during archive extraction. * Fixed an unexpected crash (ConcurrentModificationException) when processing compiler arguments concurrently. * Fixed compiler diagnostics and warning reporting to ensure multi-line messages and warning categories are properly displayed. * Fixed Java version detection when custom options or newer Java versions are present. * Fixed an issue where the Eclipse Java Compiler (ECJ) failed to detect annotation processors configured in the processor path. * Added support for quoting compiler argument files to safely handle paths containing spaces. * Fixed cross-drive file path handling on Windows systems. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including Google Guava to 33.7.1 and Eclipse Java Compiler (ECJ) to 3.46.100. plexus-containers (Updated to version 2.2.0): * Added the plexus-metadata-generator Ant task and command-line interface to generate component metadata. * Added the plexus-metadata-generator-ant package capability. plexus-i18n (Updated to version 1.2.0): * Corrected language translation lookup to prevent unintentionally falling back to the system default locale. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-interactivity (Updated to version 1.6.0): * Upgraded the terminal reader dependency to JLine 3 for improved console and terminal interaction. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including Sisu Inject to 1.1.0 and Guice to 5.1.0. plexus-interpolation (Updated to version 1.30.0): * Fixed caching issues in string and regular expression interpolators to significantly improve evaluation performance and consistency. * Added support for feedback value sources and delimiter tracking. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-io (Updated to version 3.8.0): * Improved performance by caching Unix user and group lookups. * Fixed file handling to properly follow symbolic links when configured. * Fixed an issue where temporary files were left unclosed, preventing file- not-found errors. * Improved resilience when querying file attributes on network file systems. * Added support for tracking hard-link identities for unchanged files. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies, including commons-io to 2.22.0, plexus-utils to 3.6.2, and Sisu Inject to 1.1.0. plexus-languages (Updated to version 1.6.0): * Replaced the source code parser with JavaParser for improved language support and modern Java compatibility. * Added support for newer Java versions, including JDK 23 and JDK 24 bytecode. * Improved the speed of detecting Java class file versions. * Added validation to detect and report duplicate modules on the module path. * Updated dependencies, including ObjectWeb ASM to 9.10.1. plexus-sec-dispatcher (Updated to version 2.0): * Modernized component injection by using standard javax.inject annotations. * Updated dependencies for compatibility with modern Sisu tools. plexus-utils (Updated to version 4.1.0): * Breaking change: File scanning no longer excludes ".gitignore" and ".cvsignore" files by default. * Fixed a security issue (Zip Slip) that could allow arbitrary file overwrite during archive extraction. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies. plexus-velocity (Updated to version 2.4.0): * Reduced runtime dependency requirements by eliminating unnecessary injection components. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated dependencies to secure releases, including Apache Velocity Engine to 2.4.1 and Commons Lang to 3.20.0. plexus-xml (Updated to version 3.1.0): * Fixed XML parsing issues when reading documents in UTF-8 (without BOM) and ISO-8859-1 encodings. * Added Java Module System (JPMS) support for compatibility with modern Java versions. * Updated internal dependencies, including plexus-utils to 4.0.2. New package dependencies distributed: * apache-commons-digester3: XML-to-Java object mapping library; required at runtime by `velocity-tools`. * javaparser: Java source code parser and abstract syntax tree library; required at runtime by `plexus-languages`. * antlr: Parser generator for reading, processing, and translating structured text; required at runtime by `ant` (`ant-antlr`). * jakarta-mail: Implementation of the Jakarta Mail API for email handling (addresses CVE-2025-7962); required at runtime by `ant` (`ant-jakartamail`). * jakarta-activation: Framework for handling MIME data types and extensible data content; required at runtime by `jakarta-mail` and `ant` (`ant- jakartamail`). * univocity-parsers: Fast CSV, TSV, and fixed-width tabular text parser collection; required at runtime by `ant` (`ant-junit5`) and `junit5`. * opentest4j: Common exception and test assertion abstraction for JVM testing frameworks; required at runtime by `ant` (`ant-junit5`) and `junit5`. * picocli: Annotation-based command-line interface parser; required at runtime by `junit5`. * assertj-core: Fluent assertion library for Java testing; required at runtime by `junit5`. * plexus-build-api0: Compatibility API layer for Plexus build tooling; required at runtime by `plexus-build-api`. * qdox: High-speed parser for extracting class, interface, and Javadoc metadata; required at runtime by `plexus-containers` (`plexus-component- metadata`). * bsf: Bean Scripting Framework for running scripting languages from Java; required at runtime by `ant` (`ant-apache-bsf`). * jdepend: Metric generator analyzing Java package design and dependencies; required at runtime by `ant` (`ant-jdepend`). * javassist: Java bytecode manipulation and analysis toolkit; required at runtime by `javaparser`. * ant-contrib: Additional tasks, condition handlers, and control-flow logic for Apache Ant; optional runtime companion for `ant`. * byte-buddy: Runtime code generation and bytecode manipulation library; required at runtime by `junit5` and `ant-junit5`. * velocity-tools: Reusable tools and view support helpers for the Apache Velocity template engine; standalone runtime library for template-driven web applications. * zstd-jni: JNI bindings providing fast and high-ratio lossless compression via Zstandard; required at runtime by `plexus-archiver`. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4677 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4677 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4677 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4677 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4677 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4677 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4677 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4677 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4677 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4677 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4677 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4677 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4677 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * Basesystem Module 15-SP7 (noarch) * objectweb-asm-9.10.1-150200.3.20.3 * Development Tools Module 15-SP7 (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Package Hub 15 15-SP7 (noarch) * byte-buddy-agent-1.18.8-150200.5.13.2 * byte-buddy-javadoc-1.18.8-150200.5.13.2 * ant-junit5-1.10.18-150200.4.31.3 * byte-buddy-1.18.8-150200.5.13.2 * ant-xz-1.10.18-150200.4.31.3 * junit5-minimal-5.14.4-150200.3.15.10 * ant-commons-net-1.10.18-150200.4.31.3 * ant-jsch-1.10.18-150200.4.31.3 * picocli-4.7.6-150200.3.19.2 * junit5-5.14.4-150200.3.15.15 * byte-buddy-maven-plugin-1.18.8-150200.5.13.2 * opentest4j-1.2.0-150200.3.6.4 * univocity-parsers-2.9.1-150200.3.9.4 * ant-testutil-1.10.18-150200.4.31.3 * ant-apache-xalan2-1.10.18-150200.4.31.3 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * maven-doxia-module-xdoc-2.1.0-150200.4.21.15 * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * apache-commons-digester3-3.2-150200.5.3.5 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * maven-doxia-core-2.1.0-150200.4.21.15 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * plexus-i18n-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * plexus-velocity-2.4.0-150200.3.13.2 * assertj-core-3.27.7-150200.5.11.8 * json-simple-2.3.1-150200.5.3.5 * maven-doxia-module-apt-2.1.0-150200.4.21.15 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * plexus-interactivity-api-1.6.0-150200.3.10.2 * velocity-tools-generic-3.2-150200.5.3.10 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * maven-doxia-module-xhtml5-2.1.0-150200.4.21.15 * maven-doxia-sitetools-2.1.0-150200.3.23.17 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * maven-doxia-module-fml-2.1.0-150200.4.21.15 * maven-doxia-sink-api-2.1.0-150200.4.21.15 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * maven-surefire-provider-junit-3.5.6-150200.3.9.23.28 * picocli-4.7.6-150200.3.19.2 * maven-surefire-provider-testng-3.5.6-150200.3.9.23.28 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * plexus-build-api0-0.0.8-150200.5.8.7 * plexus-utils-4.1.0-150200.3.17.2 * ant-apache-resolver-1.10.18-150200.4.31.3 * plexus-compiler-2.17.1-150200.3.12.2 * antlr-manual-2.7.7-150200.18.10.2 * plexus-component-metadata-2.2.0-150200.3.12.2 * ant-jakartamail-1.10.18-150200.4.31.3 * opentest4j-1.2.0-150200.3.6.4 * plexus-io-3.8.0-150200.3.10.2 * antlr-java-2.7.7-150200.18.10.2 * ant-scripts-1.10.18-150200.4.31.3 * maven-surefire-3.5.6-150200.3.9.23.28 * plexus-build-api-1.2.0-150200.3.10.2 * jakarta-mail-2.1.0-150200.5.7.2 * jdepend-2.10-150200.11.6.2 * plexus-sec-dispatcher-2.0-150200.3.10.2 * plexus-archiver-4.14.0-150200.3.13.2 * plexus-xml-3.1.0-150200.5.13.2 * qdox-2.0.1-150200.3.6.2 * ant-manual-1.10.18-150200.4.31.3 * assertj-core-3.27.7-150200.5.11.8 * ant-apache-regexp-1.10.18-150200.4.31.3 * junit5-5.14.4-150200.3.15.15 * ant-commons-logging-1.10.18-150200.4.31.3 * univocity-parsers-2.9.1-150200.3.9.4 * ant-1.10.18-150200.4.31.3 * plexus-cipher-2.1.0-150200.3.10.2 * plexus-interpolation-1.30.0-150200.3.12.4 * plexus-containers-component-annotations-2.2.0-150200.3.12.2 * maven-surefire-plugin-3.5.6-150200.3.9.23.3 * objectweb-asm-9.10.1-150200.3.20.3 * plexus-languages-1.6.0-150200.3.8.2 * javaparser-3.28.2-150200.3.10.2 * junit5-minimal-5.14.4-150200.3.15.10 * ant-junit-1.10.18-150200.4.31.3 * ant-apache-bsf-1.10.18-150200.4.31.3 * ant-jdepend-1.10.18-150200.4.31.3 * javassist-3.29.2-150200.3.12.2 * ant-antlr-1.10.18-150200.4.31.3 * ant-apache-oro-1.10.18-150200.4.31.3 * ant-apache-log4j-1.10.18-150200.4.31.3 * ant-contrib-1.0b3-150200.11.17.1 * ant-junit5-1.10.18-150200.4.31.3 * ant-swing-1.10.18-150200.4.31.3 * bsf-2.4.0-150200.13.8.2 * byte-buddy-1.18.8-150200.5.13.2 * jakarta-activation-2.1.0-150200.5.7.1 * picocli-4.7.6-150200.3.19.2 * ant-jmf-1.10.18-150200.4.31.3 * ant-javamail-1.10.18-150200.4.31.3 * ant-apache-bcel-1.10.18-150200.4.31.3 * plexus-classworlds-2.12.1-150200.3.8.2 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * antlr-devel-2.7.7-150200.18.10.2 * antlr-2.7.7-150200.18.10.2 * zstd-jni-1.5.7.16-150200.5.7.2 ## References: * https://www.suse.com/security/cve/CVE-2021-36374.html * https://www.suse.com/security/cve/CVE-2025-7962.html * https://www.suse.com/security/cve/CVE-2026-78254.html * https://bugzilla.suse.com/show_bug.cgi?id=1188469 * https://bugzilla.suse.com/show_bug.cgi?id=1246873 * https://bugzilla.suse.com/show_bug.cgi?id=1273185 * https://bugzilla.suse.com/show_bug.cgi?id=1280015 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 20:35:18 -0000 Subject: SUSE-SU-2026:4687-1: important: Security update for the Linux Kernel Message-ID: <179209651819.2162.9170813318626435486@b67e7bbcf91d> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4687-1 Release Date: 2026-10-15T12:38:45Z Rating: important References: * bsc#1031492 * bsc#1045298 * bsc#1254633 * bsc#1263133 * bsc#1265138 * bsc#1266410 * bsc#1266412 * bsc#1266848 * bsc#1267464 * bsc#1267985 * bsc#1267990 * bsc#1268276 * bsc#1269081 * bsc#1269131 * bsc#1269234 * bsc#1269816 * bsc#1271834 * bsc#1271906 * bsc#1272211 * bsc#1272471 * bsc#1272472 * bsc#1272473 * bsc#1272480 * bsc#1272499 * bsc#1272517 * bsc#1272522 * bsc#1272523 * bsc#1272642 * bsc#1272890 * bsc#1273023 * bsc#1273302 * bsc#1273420 * bsc#1273480 * bsc#1273600 * bsc#1273603 * bsc#1273769 * bsc#1273776 * bsc#1273868 * bsc#1273879 * bsc#1273889 * bsc#1273953 * bsc#1273976 * bsc#1273982 * bsc#1274011 * bsc#1274026 * bsc#1274037 * bsc#1274061 * bsc#1274629 * bsc#1274682 * bsc#1274831 * bsc#1274836 * bsc#1274869 * bsc#1274920 * bsc#1274981 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275681 * bsc#1275954 * bsc#1275957 * bsc#1275958 * bsc#1275959 * bsc#1275972 * bsc#1276007 * bsc#1276009 * bsc#1276257 * bsc#1276277 * bsc#1276321 * bsc#1276335 * bsc#1276339 * bsc#1276340 * bsc#1276353 * bsc#1276381 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276475 * bsc#1276495 * bsc#1276508 * bsc#1276519 * bsc#1276565 * bsc#1276585 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276865 * bsc#1276866 * bsc#1276905 * bsc#1276921 * bsc#1276923 * bsc#1276925 * bsc#1276927 * bsc#1276934 * bsc#1277064 * bsc#1277070 * bsc#1277098 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277215 * bsc#1277231 * bsc#1277245 * bsc#1277249 * bsc#1277265 * bsc#1277268 * bsc#1277272 * bsc#1277321 * bsc#1277349 * bsc#1277392 * bsc#1277396 * bsc#1277405 * bsc#1277410 * bsc#1277485 * bsc#1277489 * bsc#1277493 * bsc#1277544 * bsc#1277555 * bsc#1277556 * bsc#1277590 * bsc#1277656 * bsc#1277674 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277820 * bsc#1277822 * bsc#1277857 * bsc#1277881 * bsc#1277892 * bsc#1277896 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277918 * bsc#1278035 * bsc#1278056 * bsc#1278067 * bsc#1278094 * bsc#1278100 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278210 * bsc#1278211 * bsc#1278247 * bsc#1278310 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278416 * bsc#1278716 * bsc#1279485 * bsc#1279525 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279619 * bsc#1279621 * bsc#1279627 * bsc#1279786 * bsc#1279799 * bsc#1279809 * bsc#1279812 * bsc#1279835 * bsc#1279850 * bsc#1280139 * bsc#1280184 * bsc#1280223 * bsc#1280230 * bsc#1280237 * bsc#1280243 * bsc#1280263 * bsc#1280338 * bsc#1280375 * bsc#1280379 * bsc#1280449 * bsc#1280451 * bsc#1280468 * bsc#1280508 * bsc#1280509 * bsc#1280546 * bsc#1280551 * bsc#1280577 * bsc#1280581 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280786 * bsc#1281054 * bsc#1281176 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281352 * bsc#1281358 * bsc#1281359 * bsc#1281397 * bsc#1281408 * bsc#1281429 * bsc#1281546 * bsc#1281599 * bsc#1281680 * bsc#1281708 * bsc#1281732 * bsc#1281738 * bsc#1281778 * bsc#1281808 * bsc#1281955 * bsc#1281973 * bsc#1282050 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282270 * bsc#1282284 * bsc#1282803 * bsc#1282812 * bsc#1282881 * bsc#1282906 * bsc#1283154 * bsc#1283163 * bsc#1283201 * bsc#1283935 * bsc#1283973 * jsc#PED-16993 Cross-References: * CVE-2022-50645 * CVE-2026-100075 * CVE-2026-31663 * CVE-2026-43428 * CVE-2026-45834 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-46312 * CVE-2026-52975 * CVE-2026-53037 * CVE-2026-53237 * CVE-2026-53284 * CVE-2026-53385 * CVE-2026-53400 * CVE-2026-63897 * CVE-2026-63900 * CVE-2026-63902 * CVE-2026-63903 * CVE-2026-63904 * CVE-2026-63913 * CVE-2026-63942 * CVE-2026-63956 * CVE-2026-63957 * CVE-2026-63961 * CVE-2026-63963 * CVE-2026-64009 * CVE-2026-64014 * CVE-2026-64097 * CVE-2026-64191 * CVE-2026-64279 * CVE-2026-64299 * CVE-2026-64320 * CVE-2026-64342 * CVE-2026-64348 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64375 * CVE-2026-64378 * CVE-2026-64388 * CVE-2026-64448 * CVE-2026-64496 * CVE-2026-64540 * CVE-2026-64580 * CVE-2026-68108 * CVE-2026-68162 * CVE-2026-68184 * CVE-2026-68343 * CVE-2026-68350 * CVE-2026-68365 * CVE-2026-68376 * CVE-2026-68377 * CVE-2026-68445 * CVE-2026-68477 * CVE-2026-68479 * CVE-2026-72019 * CVE-2026-72025 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72061 * CVE-2026-72066 * CVE-2026-72098 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72129 * CVE-2026-72157 * CVE-2026-72163 * CVE-2026-72166 * CVE-2026-72224 * CVE-2026-72243 * CVE-2026-72256 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72463 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74276 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74307 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74349 * CVE-2026-74359 * CVE-2026-74384 * CVE-2026-74386 * CVE-2026-74398 * CVE-2026-74424 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74474 * CVE-2026-74475 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74497 * CVE-2026-74498 * CVE-2026-74499 * CVE-2026-74512 * CVE-2026-74540 * CVE-2026-74585 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74601 * CVE-2026-74609 * CVE-2026-74630 * CVE-2026-74641 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74682 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74691 * CVE-2026-74692 * CVE-2026-74701 * CVE-2026-74726 * CVE-2026-74739 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80558 * CVE-2026-80561 * CVE-2026-80664 * CVE-2026-80681 * CVE-2026-80731 * CVE-2026-80747 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80798 * CVE-2026-80800 * CVE-2026-80829 * CVE-2026-80841 * CVE-2026-80844 * CVE-2026-80847 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80908 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-81005 * CVE-2026-89448 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89524 * CVE-2026-89531 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89544 * CVE-2026-89548 * CVE-2026-89551 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89686 * CVE-2026-89707 * CVE-2026-89752 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89870 * CVE-2026-89927 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89968 * CVE-2026-90088 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90203 * CVE-2026-90223 * CVE-2026-90259 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-92525 * CVE-2026-93104 * CVE-2026-93108 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93829 * CVE-2026-97557 * CVE-2026-97940 * CVE-2026-98080 * CVE-2026-98164 CVSS scores: * CVE-2022-50645 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2022-50645 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31663 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43428 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-43428 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-43428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45834 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45834 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45834 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46312 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46312 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52975 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52975 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53037 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53037 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53037 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53237 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53237 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53237 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53385 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53385 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63897 ( SUSE ): 2.4 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63897 ( SUSE ): 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-63900 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63900 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-63902 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63902 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63903 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63903 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-63904 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63904 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63942 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63942 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63942 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63957 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63957 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63961 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63961 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64014 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64014 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64014 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64097 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64097 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64191 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64191 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64191 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64342 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64342 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64342 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64348 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64348 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64348 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64375 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64375 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64378 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64496 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64496 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64540 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64540 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-64540 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68108 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68108 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-68108 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68184 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-68184 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68350 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68365 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68365 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68479 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68479 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72463 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72463 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74276 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74474 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74474 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74497 ( SUSE ): 5.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74497 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74498 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74499 ( SUSE ): 6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74512 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74585 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74641 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74641 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74682 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74691 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74691 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80558 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80561 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80561 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80561 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80798 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80798 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80800 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80829 ( SUSE ): 5.2 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80829 ( SUSE ): 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80908 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81005 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-81005 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89524 ( SUSE ): 5.9 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89524 ( SUSE ): 6.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89524 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89752 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89752 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89870 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89870 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89870 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89927 ( SUSE ): 8.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-89927 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89927 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90223 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90223 ( NVD ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 229 vulnerabilities, contains one feature and has five security fixes can now be installed. ## Description: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2022-50645: EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (bsc#1254633). * CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133). * CVE-2026-43428: USB: core: Limit the length of unkillable synchronous timeouts (bsc#1265138). * CVE-2026-45834: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() (bsc#1266412). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-46312: media: videobuf2: Set vma_flags in vb2_dma_sg_mmap (bsc#1267990). * CVE-2026-52975: bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner (bsc#1269234). * CVE-2026-53037: HID: usbhid: fix deadlock in hid_post_reset() (bsc#1269081). * CVE-2026-53237: gpio: mvebu: fix NULL pointer dereference in suspend/resume (bsc#1269131). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53385: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write (bsc#1271834). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1273953). * CVE-2026-63897: USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (bsc#1272642). * CVE-2026-63900: USB: serial: keyspan: fix missing indat transfer sanity check (bsc#1272499). * CVE-2026-63902: USB: serial: cypress_m8: validate interrupt packet headers (bsc#1272517). * CVE-2026-63903: USB: serial: belkin_sa: validate interrupt status length (bsc#1272522). * CVE-2026-63904: usb: usbtmc: check URB actual_length for interrupt-IN notifications (bsc#1272523). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63942: parport: Fix race between port and client registration (bsc#1273023). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63957: USB: serial: safe_serial: fix memory corruption with small endpoint (bsc#1272472). * CVE-2026-63961: usb: typec: altmodes/displayport: validate count before reading Status Update VDO (bsc#1272480). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64014: Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (bsc#1273769). * CVE-2026-64097: drm/amd/display: Validate GPIO pin LUT table size before iterating (bsc#1273480). * CVE-2026-64191: i2c: stub: Reject I2C block transfers with invalid length (bsc#1272211). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64320: nvmet: fix discover log page when offsets are used (bsc#1273420). * CVE-2026-64342: USB: iowarrior: fix use-after-free on disconnect (bsc#1274011). * CVE-2026-64348: usb: free iso schedules on failed submit (bsc#1274026). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64375: proc: protect ptrace_may_access() with exec_update_lock (FD links) (bsc#1273868). * CVE-2026-64378: writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() (bsc#1273603). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64496: iio: event: Fix event FIFO reset race (bsc#1273600). * CVE-2026-64540: usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() (bsc#1273302). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-68108: drm/amdgpu/vce: fix integer overflow in image size (bsc#1274869). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68184: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL (bsc#1274981). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68350: wifi: carl9170: fix OOB read from off-by-two in TX status handler (bsc#1274682). * CVE-2026-68365: USB: serial: io_edgeport: cap received transmit credits (bsc#1276257). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68377: net/sched: act_tunnel_key: Defer dst_release to RCU callback (bsc#1274831). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-68479: Bluetooth: btrtl: validate firmware patch bounds (bsc#1276585). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72166: net/9p: avoid -ERESTARTSYS leak to userspace (bsc#1277556). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: fix false-positive __read_overflow2_field() warning (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72463: xfrm: Fix dev use-after-free in xfrm async resumption (bsc#1268276 bsc#1277064). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74276: spi: xilinx: use FIFO occupancy register to determine buffer size (bsc#1276495). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74386: nvmet-tcp: fix a memory leak when releasing a queue (bsc#1277098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74424: fbcon: fix NULL pointer dereference for a console without vc_data (bsc#1276321). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74474: vxlan: use pskb_network_may_pull() for transmit path header pulls (bsc#1276335). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74497: ALSA: usb-audio: Clamp frame size in implicit-feedback mode (bsc#1275957). * CVE-2026-74498: ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set (bsc#1275958). * CVE-2026-74499: ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() (bsc#1275959). * CVE-2026-74512: audit: fix potential use-after-free in audit_del_rule() (bsc#1275954). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74585: thunderbolt: Bound the DROM dual link port number before indexing sw->ports (bsc#1277881). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74682: ALSA: usb-audio: fix OOB write on Type II inbound URBs (bsc#1276934). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74691: net: thunderbolt: Tear down DMA paths before stopping the rings (bsc#1276925). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80558: libceph: Avoid using invalid osd indices from primary_temp (bsc#1277485). * CVE-2026-80561: libceph: fix multiple unsafe decodes in decode_locker() (bsc#1277265). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80798: nfc: llcp: reject PDUs shorter than the LLCP header (bsc#1279809). * CVE-2026-80800: nfc: llcp: bound the connect_sn TLV walk to the skb (bsc#1279812). * CVE-2026-80829: ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() (bsc#1279485). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80908: drm/amdgpu: Reject UVD message with dimensions above 4096 (bsc#1279627). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-81005: ipmi: si: Fix NULL pointer dereference after failed registration (bsc#1280230). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: Do not reset transport on data digest errors (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89524: wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets (bsc#1280581). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89752: mm: memcg: stop reclaim when a limit update is superseded (bsc#1281176). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89870: media: zoran: Avoid freeing a registered video_device twice (bsc#1281352). * CVE-2026-89927: KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (bsc#1281429). * CVE-2026-89929: KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90223: nfc: llcp: bound SNL TLV parsing to the skb and add length checks (bsc#1281708). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN (git-fixes). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * Fix backport of "RDMA/efa: Fix PBL chunk length computation" Refresh:. * gpio: mvebu: Use IS_REACHABLE instead of IS_ENABLED for CONFIG_PWM (git- fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * RDMA/efa: Fix PBL chunk length computation. * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * scripts/osc_wrapper: Select repository appropriate for architecture. * scripts: Add kernel_repos. * scripts: obsapi: Kick get_kernel_projects from uploader * scripts: obsapi: Kick get_project_repo_archs from uploader * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb3: missing inode locks in punch hole (git-fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * xfs: don't drain buffer lru on freeze and read-only remount (bsc#1280223). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4687 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4687 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4687 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (nosrc) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_333-default-1-8.3.3 * kernel-default-kgraft-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-kgraft-devel-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * dlm-kmp-default-4.12.14-122.333.2 * dlm-kmp-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-4.12.14-122.333.2 * cluster-md-kmp-default-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-base-debuginfo-4.12.14-122.333.2 * kernel-syms-4.12.14-122.333.2 * kernel-default-base-4.12.14-122.333.2 * cluster-md-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-devel-4.12.14-122.333.2 * gfs2-kmp-default-debuginfo-4.12.14-122.333.2 * gfs2-kmp-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * kernel-default-devel-debuginfo-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * kernel-macros-4.12.14-122.333.2 * kernel-source-4.12.14-122.333.2 * kernel-devel-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x) * kernel-default-man-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * dlm-kmp-default-4.12.14-122.333.2 * dlm-kmp-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-4.12.14-122.333.2 * cluster-md-kmp-default-4.12.14-122.333.2 * kernel-default-debugsource-4.12.14-122.333.2 * kernel-default-base-debuginfo-4.12.14-122.333.2 * kernel-syms-4.12.14-122.333.2 * kernel-default-base-4.12.14-122.333.2 * kernel-default-devel-debuginfo-4.12.14-122.333.2 * cluster-md-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-debuginfo-4.12.14-122.333.2 * ocfs2-kmp-default-debuginfo-4.12.14-122.333.2 * kernel-default-devel-4.12.14-122.333.2 * gfs2-kmp-default-debuginfo-4.12.14-122.333.2 * gfs2-kmp-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (nosrc x86_64) * kernel-default-4.12.14-122.333.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * kernel-macros-4.12.14-122.333.2 * kernel-source-4.12.14-122.333.2 * kernel-devel-4.12.14-122.333.2 ## References: * https://www.suse.com/security/cve/CVE-2022-50645.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-31663.html * https://www.suse.com/security/cve/CVE-2026-43428.html * https://www.suse.com/security/cve/CVE-2026-45834.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-46312.html * https://www.suse.com/security/cve/CVE-2026-52975.html * https://www.suse.com/security/cve/CVE-2026-53037.html * https://www.suse.com/security/cve/CVE-2026-53237.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53385.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63897.html * https://www.suse.com/security/cve/CVE-2026-63900.html * https://www.suse.com/security/cve/CVE-2026-63902.html * https://www.suse.com/security/cve/CVE-2026-63903.html * https://www.suse.com/security/cve/CVE-2026-63904.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63942.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63957.html * https://www.suse.com/security/cve/CVE-2026-63961.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64014.html * https://www.suse.com/security/cve/CVE-2026-64097.html * https://www.suse.com/security/cve/CVE-2026-64191.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64342.html * https://www.suse.com/security/cve/CVE-2026-64348.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64375.html * https://www.suse.com/security/cve/CVE-2026-64378.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64496.html * https://www.suse.com/security/cve/CVE-2026-64540.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-68108.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68184.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68350.html * https://www.suse.com/security/cve/CVE-2026-68365.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68377.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-68479.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72463.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74276.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74424.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74474.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74497.html * https://www.suse.com/security/cve/CVE-2026-74498.html * https://www.suse.com/security/cve/CVE-2026-74499.html * https://www.suse.com/security/cve/CVE-2026-74512.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74585.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74641.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74682.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74691.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80558.html * https://www.suse.com/security/cve/CVE-2026-80561.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80798.html * https://www.suse.com/security/cve/CVE-2026-80800.html * https://www.suse.com/security/cve/CVE-2026-80829.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80908.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-81005.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89524.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89752.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89870.html * https://www.suse.com/security/cve/CVE-2026-89927.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90223.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1031492 * https://bugzilla.suse.com/show_bug.cgi?id=1045298 * https://bugzilla.suse.com/show_bug.cgi?id=1254633 * https://bugzilla.suse.com/show_bug.cgi?id=1263133 * https://bugzilla.suse.com/show_bug.cgi?id=1265138 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266412 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1267990 * https://bugzilla.suse.com/show_bug.cgi?id=1268276 * https://bugzilla.suse.com/show_bug.cgi?id=1269081 * https://bugzilla.suse.com/show_bug.cgi?id=1269131 * https://bugzilla.suse.com/show_bug.cgi?id=1269234 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271834 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272211 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272472 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272480 * https://bugzilla.suse.com/show_bug.cgi?id=1272499 * https://bugzilla.suse.com/show_bug.cgi?id=1272517 * https://bugzilla.suse.com/show_bug.cgi?id=1272522 * https://bugzilla.suse.com/show_bug.cgi?id=1272523 * https://bugzilla.suse.com/show_bug.cgi?id=1272642 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273023 * https://bugzilla.suse.com/show_bug.cgi?id=1273302 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273480 * https://bugzilla.suse.com/show_bug.cgi?id=1273600 * https://bugzilla.suse.com/show_bug.cgi?id=1273603 * https://bugzilla.suse.com/show_bug.cgi?id=1273769 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273868 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274011 * https://bugzilla.suse.com/show_bug.cgi?id=1274026 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274682 * https://bugzilla.suse.com/show_bug.cgi?id=1274831 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274869 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1274981 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275954 * https://bugzilla.suse.com/show_bug.cgi?id=1275957 * https://bugzilla.suse.com/show_bug.cgi?id=1275958 * https://bugzilla.suse.com/show_bug.cgi?id=1275959 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276257 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276321 * https://bugzilla.suse.com/show_bug.cgi?id=1276335 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276495 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276585 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276925 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276934 * https://bugzilla.suse.com/show_bug.cgi?id=1277064 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277265 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277485 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277881 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278310 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1279485 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279627 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279809 * https://bugzilla.suse.com/show_bug.cgi?id=1279812 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280223 * https://bugzilla.suse.com/show_bug.cgi?id=1280230 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280581 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281176 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281352 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281429 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281708 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 20:35:38 -0000 Subject: SUSE-SU-2026:4686-1: moderate: Security update for openssh Message-ID: <179209653863.2162.15709822601729605062@b67e7bbcf91d> # Security update for openssh Announcement ID: SUSE-SU-2026:4686-1 Release Date: 2026-10-15T12:37:43Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4686 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4686 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh-helpers-7.2p2-81.43.1 * openssh-debuginfo-7.2p2-81.43.1 * openssh-fips-7.2p2-81.43.1 * openssh-7.2p2-81.43.1 * openssh-askpass-gnome-7.2p2-81.43.1 * openssh-askpass-gnome-debuginfo-7.2p2-81.43.1 * openssh-debugsource-7.2p2-81.43.1 * openssh-helpers-debuginfo-7.2p2-81.43.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh-helpers-7.2p2-81.43.1 * openssh-debuginfo-7.2p2-81.43.1 * openssh-fips-7.2p2-81.43.1 * openssh-7.2p2-81.43.1 * openssh-askpass-gnome-7.2p2-81.43.1 * openssh-askpass-gnome-debuginfo-7.2p2-81.43.1 * openssh-debugsource-7.2p2-81.43.1 * openssh-helpers-debuginfo-7.2p2-81.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 15 20:35:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 15 Oct 2026 20:35:48 -0000 Subject: SUSE-SU-2026:4685-1: important: Security update for mutt Message-ID: <179209654869.2162.15893297348985441832@b67e7bbcf91d> # Security update for mutt Announcement ID: SUSE-SU-2026:4685-1 Release Date: 2026-10-15T12:37:21Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4685 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4685 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * mutt-1.10.1-55.36.1 * mutt-debugsource-1.10.1-55.36.1 * mutt-debuginfo-1.10.1-55.36.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * mutt-1.10.1-55.36.1 * mutt-debugsource-1.10.1-55.36.1 * mutt-debuginfo-1.10.1-55.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 16:31:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 16:31:06 -0000 Subject: SUSE-SU-2026:4691-1: important: Security update for ImageMagick Message-ID: <179216826627.691.15009835984775026964@4239a07c48b6> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4691-1 Release Date: 2026-10-16T08:42:28Z Rating: important References: * bsc#1268113 * bsc#1268117 * bsc#1279696 * bsc#1279711 * bsc#1279794 * bsc#1279797 * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1281913 * bsc#1284217 * bsc#1284661 * bsc#1284662 * bsc#1284663 * bsc#1284664 * bsc#1284665 * bsc#1284667 * bsc#1284668 * bsc#1284669 * bsc#1284671 * bsc#1284672 * bsc#1284673 * bsc#1284674 * bsc#1284675 * bsc#1284677 * bsc#1284678 * bsc#1284681 * bsc#1284682 * bsc#1284683 Cross-References: * CVE-2026-105083 * CVE-2026-106564 * CVE-2026-106565 * CVE-2026-106566 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106570 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106573 * CVE-2026-106574 * CVE-2026-106575 * CVE-2026-106576 * CVE-2026-106577 * CVE-2026-106578 * CVE-2026-106579 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-86420 * CVE-2026-86421 * CVE-2026-86423 * CVE-2026-86425 * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 * CVE-2026-93590 CVSS scores: * CVE-2026-105083 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-105083 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105083 ( NVD ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-106564 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106564 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106566 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106566 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106574 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106574 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106575 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106575 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106576 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106576 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106578 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106578 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86420 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86420 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86420 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86421 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-86421 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86421 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86421 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86421 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86423 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86423 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86423 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86423 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86423 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-86425 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86425 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86425 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-86425 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-86425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93590 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93590 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93590 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93590 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 28 vulnerabilities and has two security fixes can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696). * CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711). * CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794). * CVE-2026-86425: Denial of Service due to heap-use-after-free vulnerability (bsc#1279797). * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-93590: failure to perform policy checks during buffer allocation for image pixels in the UHDR encoder can lead to denial of service (bsc#1281913). * CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something else that is valid xml (bsc#1284217). * CVE-2026-106564: a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash (bsc#1284661). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106566: delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data (bsc#1284663). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106570: an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing a DoS (bsc#1284667). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106573: a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long- running operation (bsc#1284671). * CVE-2026-106574: a client connected to the distributed pixel cache server can send crafted pixel data that triggers a heap buffer overwrite and crash the server (bsc#1284672). * CVE-2026-106575: a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors (bsc#1284673). * CVE-2026-106576: a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing a DoS (bsc#1284674). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106578: a crafted image can cause an invalid memory free in the MVG decoder and crash the process (bsc#1284677). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4691 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4691 ## Package List: * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ImageMagick-config-7-upstream-websafe-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-open-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-secure-7.1.1.43-150700.3.84.1 * libMagickWand-7_Q16HDRI10-7.1.1.43-150700.3.84.1 * ImageMagick-debuginfo-7.1.1.43-150700.3.84.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-SUSE-7.1.1.43-150700.3.84.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.1.43-150700.3.84.1 * libMagickCore-7_Q16HDRI10-7.1.1.43-150700.3.84.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-devel-7.1.1.43-150700.3.84.1 * libMagick++-7_Q16HDRI5-7.1.1.43-150700.3.84.1 * libMagick++-devel-7.1.1.43-150700.3.84.1 * ImageMagick-7.1.1.43-150700.3.84.1 * ImageMagick-debugsource-7.1.1.43-150700.3.84.1 * ImageMagick-config-7-upstream-limited-7.1.1.43-150700.3.84.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-PerlMagick-7.1.1.43-150700.3.84.1 * perl-PerlMagick-debuginfo-7.1.1.43-150700.3.84.1 * ImageMagick-debugsource-7.1.1.43-150700.3.84.1 * ImageMagick-debuginfo-7.1.1.43-150700.3.84.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105083.html * https://www.suse.com/security/cve/CVE-2026-106564.html * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106566.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106570.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106573.html * https://www.suse.com/security/cve/CVE-2026-106574.html * https://www.suse.com/security/cve/CVE-2026-106575.html * https://www.suse.com/security/cve/CVE-2026-106576.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106578.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-86420.html * https://www.suse.com/security/cve/CVE-2026-86421.html * https://www.suse.com/security/cve/CVE-2026-86423.html * https://www.suse.com/security/cve/CVE-2026-86425.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://www.suse.com/security/cve/CVE-2026-93590.html * https://bugzilla.suse.com/show_bug.cgi?id=1268113 * https://bugzilla.suse.com/show_bug.cgi?id=1268117 * https://bugzilla.suse.com/show_bug.cgi?id=1279696 * https://bugzilla.suse.com/show_bug.cgi?id=1279711 * https://bugzilla.suse.com/show_bug.cgi?id=1279794 * https://bugzilla.suse.com/show_bug.cgi?id=1279797 * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1281913 * https://bugzilla.suse.com/show_bug.cgi?id=1284217 * https://bugzilla.suse.com/show_bug.cgi?id=1284661 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284663 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284667 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284671 * https://bugzilla.suse.com/show_bug.cgi?id=1284672 * https://bugzilla.suse.com/show_bug.cgi?id=1284673 * https://bugzilla.suse.com/show_bug.cgi?id=1284674 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284677 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 16:31:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 16:31:26 -0000 Subject: SUSE-SU-2026:4690-1: important: Security update for libsoup Message-ID: <179216828603.691.17955302635506774123@4239a07c48b6> # Security update for libsoup Announcement ID: SUSE-SU-2026:4690-1 Release Date: 2026-10-16T08:42:01Z Rating: important References: * bsc#1271401 * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283831 Cross-References: * CVE-2026-0716 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-103399 * CVE-2026-12478 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-1539 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-66339 CVSS scores: * CVE-2026-0716 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-0716 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-0716 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12478 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12478 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12478 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-1539 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N * CVE-2026-1539 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-1539 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-1539 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12478: websocket: Fix out-of-bounds read when reading unmasked frame (bsc#1271401). * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4690 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4690 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-devel-2.62.2-5.49.1 * typelib-1_0-Soup-2_4-2.62.2-5.49.1 * libsoup-debugsource-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-2.62.2-5.49.1 * libsoup-2_4-1-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libsoup-2_4-1-32bit-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-32bit-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * libsoup-lang-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libsoup-devel-2.62.2-5.49.1 * libsoup-debugsource-2.62.2-5.49.1 * typelib-1_0-Soup-2_4-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-32bit-2.62.2-5.49.1 * libsoup-2_4-1-debuginfo-2.62.2-5.49.1 * libsoup-2_4-1-32bit-2.62.2-5.49.1 * libsoup-2_4-1-2.62.2-5.49.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * libsoup-lang-2.62.2-5.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0716.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12478.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-1539.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271401 * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:30:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:30:12 -0000 Subject: SUSE-SU-2026:4708-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218261272.884.9290690661330978756@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4708-1 Release Date: 2026-10-16T13:41:50Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.72 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4708 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_72-rt-4-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_19-debugsource-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_72-rt-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:41:05 -0000 Subject: SUSE-SU-2026:4706-1: important: Security update for the Linux Kernel Message-ID: <179218326579.884.5679326111742773205@6bdb3a6ced90> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4706-1 Release Date: 2026-10-16T13:34:08Z Rating: important References: * bsc#1222538 * bsc#1250951 * bsc#1254408 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267882 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1272971 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273320 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274824 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274900 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275137 * bsc#1275142 * bsc#1275238 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275680 * bsc#1275681 * bsc#1275682 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275801 * bsc#1275802 * bsc#1275804 * bsc#1275812 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275956 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276471 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276852 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1276947 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277153 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277234 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277407 * bsc#1277410 * bsc#1277451 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277535 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277773 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277845 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278709 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279590 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280239 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280309 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280927 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283121 * bsc#1283130 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283489 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16968 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23352 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63987 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68128 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68258 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68395 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72018 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72125 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72147 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72337 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-72491 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74286 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74440 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74513 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74533 * CVE-2026-74534 * CVE-2026-74535 * CVE-2026-74536 * CVE-2026-74538 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74551 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74665 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80721 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80947 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90047 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98030 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63987 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63987 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63987 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68128 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68128 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-68128 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68395 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72125 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72337 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74286 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74533 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74534 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74535 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74535 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74665 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74665 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80721 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80721 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80947 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80947 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90047 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90047 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * Legacy Module 15-SP7 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 508 vulnerabilities, contains seven features and has 20 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68128: ice: reject out-of-range ptype in ice_parser_profile_init (bsc#1275238). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68395: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered (bsc#1274900). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72125: can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER (bsc#1277535). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72337: Bluetooth: 6lowpan: avoid untracked enable work (bsc#1277773). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74286: net: pfcp: allocate per-cpu tstats for PFCP netdevs (bsc#1276471). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74513: dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister (bsc#1275956). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74533: replace additional lock in hci_conn with a common spinlock (bsc#1275804). * CVE-2026-74534: Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths (bsc#1275801). * CVE-2026-74535: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (bsc#1275812). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74551: hwmon: (nzxt-smart2) DMA-align output buffer (bsc#1275680). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74665: net: fix skb length accounting after generic XDP frag adjustment (bsc#1277407). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80721: Bluetooth: ISO: ensure no dangling hcon references in iso_conn (bsc#1277845). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80947: wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop (bsc#1280239). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90047: drm/xe: Don't hand out the flat CCS storage as usable VRAM (bsc#1280927). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Fix potential NULL pointer dereference (bsc#1283130). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr (git-fixes). * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb-audio: Propagate write errors in generic mixer put callbacks (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology (git-fixes). * ASoC: Intel: avs: Fix unbalanced module reference count (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: bound firmware ID by TLV length (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btintel_pcie: Clear automask on spurious interrupts (git-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one (git-fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btintel_pcie: validate packet_len before skb_put_data (git- fixes). * Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev (git- fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix race condition during device registration (git- fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 (git- fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/nouveau: unsubscribe the channel-kill event before the fence context (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() (git-fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * drm: rz-du: Ensure correct suspend/resume ordering with VSP (stable-fixes). * EDAC/amd64: Add support for AMD family 1Ah-based newer models (jsc#PED-16968). * EDAC/mc_sysfs: Increase legacy channel support to 16 (jsc#PED-16968). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: core: fix adapter registration race (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (jsc#PED-16854). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: s390: pci: Fix aisb calculation (bsc#1277451). * KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic (bsc#1277451). * KVM: s390: pci: Fix GISC refcount leak on AIF enable failure (bsc#1277451). * KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1277451). * KVM: s390: pci: Fix memory accounting for pinned/unpinned pages (bsc#1277451). * KVM: s390: pci: Fix missing error codes and memory unaccounting (bsc#1277451). * KVM: s390: pci: Fix NULL dereference on AIBV allocation failure (bsc#1277451). * KVM: s390: pci: Fix resource leak on IRQ registration failure (bsc#1277451). * KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1277451). * KVM: s390: pci: Validate AIBV and AISB before pinning guest pages (bsc#1277451). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer (git- fixes). * media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: ibmveth: added KUnit tests for some buffer pool functions (jsc#PED-16852). * net: ibmveth: Indented struct ibmveth_adapter correctly (jsc#PED-16852). * net: ibmveth: Refactored veth_pool_store for better maintainability (jsc#PED-16852). * net: ibmveth: Reset the adapter when unexpected states are detected (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * nvme-tcp: fix usage of page_frag_cache (bsc#1267882). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/perf: Set cpumode flags using sample address (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: davinci: Unset POWERDOWN bit when releasing resources (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (git-fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: fix UAF when probe runs concurrent to dyn ID removal (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * USB: make to_usb_driver() use container_of_const() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mce: Add support for physical address valid bit (jsc#PED-16968). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * x86/tsx: Get the tsx= command line parameter with early_param() (bsc#1250951). * x86/tsx: Make tsx_ctrl_state static (bsc#1250951). * xfs: don't free cowblocks from under dirty pagecache on unshare (bsc#1278709). * xhci: fix lost bounce buffers on TDs spanning several ring segments (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4706 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4706 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4706 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4706 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4706 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4706 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4706 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-6.4.0-150700.53.84.1 * ocfs2-kmp-default-6.4.0-150700.53.84.1 * gfs2-kmp-default-6.4.0-150700.53.84.1 * dlm-kmp-default-6.4.0-150700.53.84.1 * gfs2-kmp-default-debuginfo-6.4.0-150700.53.84.1 * cluster-md-kmp-default-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * dlm-kmp-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * ocfs2-kmp-default-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise High Availability Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150700.53.84.1.150700.17.47.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-devel-debuginfo-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (noarch) * kernel-devel-6.4.0-150700.53.84.1 * kernel-macros-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (nosrc s390x) * kernel-zfcpdump-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150700.53.84.1 * kernel-zfcpdump-debuginfo-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64 nosrc) * kernel-64kb-6.4.0-150700.53.84.1 * Basesystem Module 15-SP7 (aarch64) * kernel-64kb-debuginfo-6.4.0-150700.53.84.1 * kernel-64kb-devel-debuginfo-6.4.0-150700.53.84.1 * kernel-64kb-debugsource-6.4.0-150700.53.84.1 * kernel-64kb-devel-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (noarch nosrc) * kernel-docs-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-150700.53.84.1 * kernel-obs-build-6.4.0-150700.53.84.1 * kernel-obs-build-debugsource-6.4.0-150700.53.84.1 * Development Tools Module 15-SP7 (noarch) * kernel-source-6.4.0-150700.53.84.1 * Legacy Module 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-6.4.0-150700.53.84.1 * reiserfs-kmp-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Live Patching 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-default-livepatch-devel-6.4.0-150700.53.84.1 * kernel-default-livepatch-6.4.0-150700.53.84.1 * kernel-livepatch-6_4_0-150700_53_84-default-debuginfo-1-150700.15.3.1 * kernel-livepatch-SLE15-SP7_Update_22-debugsource-1-150700.15.3.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-livepatch-6_4_0-150700_53_84-default-1-150700.15.3.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * Public Cloud Module 15-SP7 (aarch64 nosrc x86_64) * kernel-azure-6.4.0-150700.53.84.1 * Public Cloud Module 15-SP7 (aarch64 x86_64) * kernel-azure-debugsource-6.4.0-150700.53.84.1 * kernel-azure-devel-6.4.0-150700.53.84.1 * kernel-azure-debuginfo-6.4.0-150700.53.84.1 * kernel-azure-devel-debuginfo-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.84.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * kernel-default-extra-6.4.0-150700.53.84.1 * kernel-default-debugsource-6.4.0-150700.53.84.1 * kernel-default-debuginfo-6.4.0-150700.53.84.1 * kernel-default-extra-debuginfo-6.4.0-150700.53.84.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63987.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68128.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68395.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72125.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72337.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74286.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74513.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74533.html * https://www.suse.com/security/cve/CVE-2026-74534.html * https://www.suse.com/security/cve/CVE-2026-74535.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74551.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74665.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80721.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80947.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90047.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1250951 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267882 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1272971 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274900 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275238 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275680 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275801 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275804 * https://bugzilla.suse.com/show_bug.cgi?id=1275812 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275956 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276471 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277407 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277451 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277535 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277773 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277845 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278709 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280239 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280927 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16968 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:41:17 -0000 Subject: SUSE-SU-2026:4702-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218327779.884.8945822236923850845@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4702-1 Release Date: 2026-10-16T15:34:00Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.67 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4702 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4713 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_67-rt-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-debuginfo-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_62-rt-6-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_18-debugsource-4-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_17-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_7_67-rt-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:41:30 -0000 Subject: SUSE-SU-2026:4693-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Message-ID: <179218329023.884.329467531785067390@6bdb3a6ced90> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4693-1 Release Date: 2026-10-16T15:33:51Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.59 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4693 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4695 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4698 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4694 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4697 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4699 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4696 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4711 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4701 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4712 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4700 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4707 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_22-rt-debuginfo-15-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-debuginfo-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-debuginfo-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_22-rt-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_15-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-14-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_54-rt-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_12-debugsource-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_40-rt-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-debuginfo-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_11-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_28-rt-debuginfo-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_13-debugsource-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_16-debugsource-7-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_5-debugsource-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-9-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_9-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_7_25-rt-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_8-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_6-debugsource-15-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_4-debugsource-19-150700.2.1 * kernel-livepatch-6_4_0-150700_7_37-rt-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_51-rt-debuginfo-8-150700.2.1 * kernel-livepatch-6_4_0-150700_7_19-rt-16-150700.2.1 * kernel-livepatch-6_4_0-150700_7_59-rt-7-150700.2.1 * kernel-livepatch-6_4_0-150700_7_44-rt-debuginfo-9-150700.2.1 * kernel-livepatch-6_4_0-150700_7_31-rt-13-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_14-debugsource-8-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_7-debugsource-14-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:41:36 -0000 Subject: SUSE-SU-2026:4710-1: moderate: Security update for glib2 Message-ID: <179218329613.884.17347923026951455502@6bdb3a6ced90> # Security update for glib2 Announcement ID: SUSE-SU-2026:4710-1 Release Date: 2026-10-16T13:51:25Z Rating: moderate References: * bsc#1272206 Cross-References: * CVE-2026-15588 CVSS scores: * CVE-2026-15588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-15588 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-15588 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability can now be installed. ## Description: This update for glib2 fixes the following issue: * CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded SASL line buffering (bsc#1272206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4710 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4710 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4710 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4710 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4710 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4710 ## Package List: * openSUSE Leap 15.4 (noarch) * gio-branding-upstream-2.70.5-150400.3.40.1 * glib2-lang-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libgobject-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-doc-2.70.5-150400.3.40.1 * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * glib2-tests-devel-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgthread-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-devel-static-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * glib2-devel-2.70.5-150400.3.40.1 * libgthread-2_0-0-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tests-devel-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * glib2-devel-debuginfo-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (x86_64) * libgthread-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-32bit-2.70.5-150400.3.40.1 * libgio-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-32bit-2.70.5-150400.3.40.1 * libglib-2_0-0-32bit-2.70.5-150400.3.40.1 * libglib-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-32bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-32bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-32bit-2.70.5-150400.3.40.1 * glib2-devel-32bit-2.70.5-150400.3.40.1 * glib2-devel-32bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-32bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-32bit-debuginfo-2.70.5-150400.3.40.1 * openSUSE Leap 15.4 (aarch64_ilp32) * glib2-devel-64bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-64bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-64bit-2.70.5-150400.3.40.1 * libglib-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * glib2-tools-64bit-2.70.5-150400.3.40.1 * libgthread-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-64bit-2.70.5-150400.3.40.1 * libgobject-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-64bit-2.70.5-150400.3.40.1 * glib2-tools-64bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-64bit-2.70.5-150400.3.40.1 * glib2-devel-64bit-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-64bit-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * glib2-tools-debuginfo-2.70.5-150400.3.40.1 * libglib-2_0-0-2.70.5-150400.3.40.1 * glib2-tools-2.70.5-150400.3.40.1 * libgmodule-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgobject-2_0-0-2.70.5-150400.3.40.1 * glib2-debugsource-2.70.5-150400.3.40.1 * libglib-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgmodule-2_0-0-2.70.5-150400.3.40.1 * libgobject-2_0-0-debuginfo-2.70.5-150400.3.40.1 * libgio-2_0-0-2.70.5-150400.3.40.1 * libgio-2_0-0-debuginfo-2.70.5-150400.3.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15588.html * https://bugzilla.suse.com/show_bug.cgi?id=1272206 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:41:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:41:44 -0000 Subject: SUSE-SU-2026:4704-1: important: Security update for python-urllib3 Message-ID: <179218330443.884.5132556131732305667@6bdb3a6ced90> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:4704-1 Release Date: 2026-10-16T13:31:23Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4704 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4704 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4704 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4704 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4704 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4704 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4704 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4704 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4704 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4704 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4704 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4704 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4704 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * Public Cloud Module 15-SP4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * openSUSE Leap 15.4 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * Python 3 Module 15-SP7 (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-urllib3-2.0.7-150400.7.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 16 20:42:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 16 Oct 2026 20:42:05 -0000 Subject: SUSE-SU-2026:4703-1: important: Security update for libsoup2 Message-ID: <179218332533.884.13818038666066863493@6bdb3a6ced90> # Security update for libsoup2 Announcement ID: SUSE-SU-2026:4703-1 Release Date: 2026-10-16T13:29:47Z Rating: important References: * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1275988 * bsc#1276759 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 * CVE-2026-77014 * CVE-2026-77680 CVSS scores: * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-77014 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77014 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77680 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77680 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup2 fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988). * CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4703 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4703 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4703 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4703 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150600.4.42.1 * libsoup2-devel-32bit-2.74.3-150600.4.42.1 * libsoup-2_4-1-32bit-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libsoup-2_4-1-64bit-debuginfo-2.74.3-150600.4.42.1 * libsoup-2_4-1-64bit-2.74.3-150600.4.42.1 * libsoup2-devel-64bit-2.74.3-150600.4.42.1 * openSUSE Leap 15.6 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * Basesystem Module 15-SP7 (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-2.74.3-150600.4.42.1 * typelib-1_0-Soup-2_4-2.74.3-150600.4.42.1 * libsoup-2_4-1-debuginfo-2.74.3-150600.4.42.1 * libsoup2-debugsource-2.74.3-150600.4.42.1 * libsoup2-devel-2.74.3-150600.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * libsoup2-lang-2.74.3-150600.4.42.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://www.suse.com/security/cve/CVE-2026-77014.html * https://www.suse.com/security/cve/CVE-2026-77680.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1275988 * https://bugzilla.suse.com/show_bug.cgi?id=1276759 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:30:19 -0000 Subject: SUSE-SU-2026:4725-1: important: Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4) Message-ID: <179239861906.9206.16858701304442676948@1f36704aac72> # Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4725-1 Release Date: 2026-10-18T18:33:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.200 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4725 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4726 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4727 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4723 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4724 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4726 SUSE-2026-4727 SUSE-2026-4723 SUSE-2026-4724 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_310-default-8-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_50-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-15-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_184-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-debuginfo-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-debuginfo-13-150400.2.1 * kernel-livepatch-5_14_21-150400_24_194-default-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_49-debugsource-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_48-debugsource-13-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_50-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_200-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_46-debugsource-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_197-default-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_184-default-15-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:30:31 -0000 Subject: SUSE-SU-2026:4718-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) Message-ID: <179239863191.9206.4274885541868409782@1f36704aac72> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4718-1 Release Date: 2026-10-18T15:04:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.176 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4718 SUSE-SLE-Live- Patching-12-SP5-2026-4719 SUSE-SLE-Live-Patching-12-SP5-2026-4721 SUSE-SLE-Live- Patching-12-SP5-2026-4720 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4722 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4722 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_307-default-8-2.1 * kgraft-patch-4_12_14-122_293-default-14-2.1 * kgraft-patch-4_12_14-122_302-default-10-2.1 * kgraft-patch-4_12_14-122_296-default-11-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-21-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-21-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-21-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-21-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-21-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-21-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:30:42 -0000 Subject: SUSE-SU-2026:4717-1: important: Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Message-ID: <179239864295.9206.8307260918668608729@1f36704aac72> # Security update for the Linux Kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4717-1 Release Date: 2026-10-18T11:04:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4717 SUSE-SLE-Live- Patching-12-SP5-2026-4716 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_290-default-15-2.1 * kgraft-patch-4_12_14-122_283-default-15-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:41:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:41:40 -0000 Subject: SUSE-SU-2026:24181-1: important: Security update for the Linux Kernel Message-ID: <179239930056.9206.9982293196998678589@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24181-1 Release Date: 2026-10-12T16:13:17Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 473 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-684 ## Package List: * SUSE Linux Micro 6.1 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 ppc64le) * kernel-default-base-6.4.0-159998.53.1.159998.21.38 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * kernel-default-devel-6.4.0-159998.53.1 * kernel-default-debuginfo-6.4.0-159998.53.1 * kernel-default-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (noarch) * kernel-source-6.4.0-159998.53.1 * kernel-macros-6.4.0-159998.53.1 * kernel-devel-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (ppc64le x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-default-base-6.4.0-159998.53.1.159998.21.37 * kernel-kvmsmall-debuginfo-6.4.0-159998.53.1 * kernel-kvmsmall-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:41:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:41:49 -0000 Subject: SUSE-SU-2026:24189-1: moderate: Security update for python-oauthlib Message-ID: <179239930929.9206.4259067612621956479@1f36704aac72> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24189-1 Release Date: 2026-10-14T16:09:45Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1917 ## Package List: * SUSE Linux Micro 6.2 (noarch) * python313-oauthlib-3.2.2-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:42:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:42:09 -0000 Subject: SUSE-SU-2026:24188-1: important: Security update for openssl-3 Message-ID: <179239932957.9206.8672648570262914164@1f36704aac72> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24188-1 Release Date: 2026-10-14T15:16:30Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1916 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 08:51:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 08:51:27 -0000 Subject: SUSE-SU-2026:24184-1: important: Security update for the Linux Kernel Message-ID: <179239988735.9206.11673887901878432902@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24184-1 Release Date: 2026-10-12T13:24:33Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1904 ## Package List: * SUSE Linux Micro 6.2 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-rt-devel-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-rt-livepatch-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (noarch) * kernel-source-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 nosrc x86_64) * kernel-rt-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * kernel-rt-debuginfo-6.12.0-160000.39.1 * kernel-rt-devel-6.12.0-160000.39.1 * kernel-rt-debugsource-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (aarch64) * kernel-64kb-devel-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.28 * kernel-64kb-debuginfo-6.12.0-160000.39.1 * kernel-64kb-debugsource-6.12.0-160000.39.1 * SUSE Linux Micro 6.2 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:02:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 09:02:37 -0000 Subject: SUSE-SU-2026:24182-1: important: Security update for podman Message-ID: <179240055707.9206.11002655386381491820@1f36704aac72> # Security update for podman Announcement ID: SUSE-SU-2026:24182-1 Release Date: 2026-10-12T08:46:21Z Rating: important References: * bsc#1222538 * bsc#1248988 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1268579 * bsc#1269000 * bsc#1269471 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-55686 * CVE-2026-57231 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro 6.2 An update that solves 481 vulnerabilities, contains three features and has 15 fixes can now be installed. ## Security update for podman ### Description: This update for podman fixes the following issues: Security issues fixed: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). Non security issue fixed: * catatonit missing in /usr/libexec/podman/ (bsc#1248988). ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-686 * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1902 ## Package List: * SUSE Linux Micro 6.1 (noarch) * kernel-source-rt-6.4.0-159998.53.1 * kernel-devel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 nosrc x86_64) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (aarch64 x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-debuginfo-6.4.0-159998.53.1 * kernel-rt-devel-6.4.0-159998.53.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-rt-livepatch-6.4.0-159998.53.1 * kernel-rt-devel-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * podman-remote-debuginfo-5.4.2-160000.6.1 * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * SUSE Linux Micro 6.2 (noarch) * podman-docker-5.4.2-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1248988 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:11:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 09:11:59 -0000 Subject: SUSE-SU-2026:24179-1: important: Security update for the Linux Kernel Message-ID: <179240111945.9206.16546132404766649983@1f36704aac72> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24179-1 Release Date: 2026-10-12T14:15:17Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1904 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.12.0-160000.39.1 * kernel-obs-build-6.12.0-160000.39.1 * kernel-obs-build-debugsource-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:22:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 09:22:55 -0000 Subject: SUSE-SU-2026:24178-1: important: Security update for iperf Message-ID: <179240177570.9206.17297174152961648525@1f36704aac72> # Security update for iperf Announcement ID: SUSE-SU-2026:24178-1 Release Date: 2026-10-12T13:03:29Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * bsc#1284404 * bsc#1284405 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-71217 * CVE-2026-71218 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.1 * SUSE Linux Micro Extras 6.2 An update that solves 478 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Security update for iperf ### Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22 ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-kernel-684 * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1903 ## Package List: * SUSE Linux Micro Extras 6.1 (nosrc) * kernel-64kb-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.1 (aarch64) * kernel-64kb-devel-6.4.0-159998.53.1 * kernel-64kb-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-159998.53.1 * kernel-obs-build-debugsource-6.4.0-159998.53.1 * kernel-obs-build-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * iperf-debugsource-3.21-160000.1.1 * libiperf0-3.21-160000.1.1 * iperf-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:23:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 09:23:01 -0000 Subject: SUSE-SU-2026:4715-1: important: Security update for buildah Message-ID: <179240178195.9206.4283905147761507638@1f36704aac72> # Security update for buildah Announcement ID: SUSE-SU-2026:4715-1 Release Date: 2026-10-17T20:34:17Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for buildah rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4715 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4715 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4715 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4715 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4715 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * buildah-1.35.5-150400.3.76.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * buildah-1.35.5-150400.3.76.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150400.3.76.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 09:23:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 09:23:15 -0000 Subject: SUSE-SU-2026:4714-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7) Message-ID: <179240179545.9206.12445181040804218609@1f36704aac72> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4714-1 Release Date: 2026-10-16T16:33:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.34 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4714 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_34-rt-debuginfo-11-150700.2.1 * kernel-livepatch-6_4_0-150700_7_34-rt-11-150700.2.1 * kernel-livepatch-SLE15-SP7-RT_Update_10-debugsource-11-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 12:30:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 12:30:18 -0000 Subject: SUSE-SU-2026:4730-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Message-ID: <179241301811.16244.13971668214415119053@78319f1833ff> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4730-1 Release Date: 2026-10-19T07:04:25Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4730 SUSE-SLE-Live- Patching-12-SP5-2026-4728 SUSE-SLE-Live-Patching-12-SP5-2026-4729 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4731 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4731 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_317-default-6-2.1 * kgraft-patch-4_12_14-122_320-default-5-2.1 * kgraft-patch-4_12_14-122_299-default-11-2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_30-debugsource-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-20-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_30-debugsource-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-20-150500.2.1 * kernel-livepatch-5_14_21-150500_55_121-default-debuginfo-20-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 12:30:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 12:30:36 -0000 Subject: SUSE-SU-2026:4732-1: important: Security update for xen Message-ID: <179241303638.16244.11554767940173407981@78319f1833ff> # Security update for xen Announcement ID: SUSE-SU-2026:4732-1 Release Date: 2026-10-19T07:15:07Z Rating: important References: * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4732 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4732 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * xen-libs-debuginfo-4.12.4_76-3.154.1 * xen-4.12.4_76-3.154.1 * xen-debugsource-4.12.4_76-3.154.1 * xen-doc-html-4.12.4_76-3.154.1 * xen-libs-debuginfo-32bit-4.12.4_76-3.154.1 * xen-libs-4.12.4_76-3.154.1 * xen-libs-32bit-4.12.4_76-3.154.1 * xen-tools-debuginfo-4.12.4_76-3.154.1 * xen-tools-domU-debuginfo-4.12.4_76-3.154.1 * xen-tools-4.12.4_76-3.154.1 * xen-tools-domU-4.12.4_76-3.154.1 * xen-devel-4.12.4_76-3.154.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * xen-libs-debuginfo-4.12.4_76-3.154.1 * xen-4.12.4_76-3.154.1 * xen-debugsource-4.12.4_76-3.154.1 * xen-doc-html-4.12.4_76-3.154.1 * xen-libs-debuginfo-32bit-4.12.4_76-3.154.1 * xen-libs-4.12.4_76-3.154.1 * xen-libs-32bit-4.12.4_76-3.154.1 * xen-tools-debuginfo-4.12.4_76-3.154.1 * xen-tools-domU-debuginfo-4.12.4_76-3.154.1 * xen-tools-4.12.4_76-3.154.1 * xen-tools-domU-4.12.4_76-3.154.1 * xen-devel-4.12.4_76-3.154.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 16:30:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 16:30:16 -0000 Subject: SUSE-SU-2026:4733-1: important: Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Message-ID: <179242741656.4003.8890357138712746955@4708518a8342> # Security update for the Linux Kernel (Live Patch 33 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4733-1 Release Date: 2026-10-19T10:47:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.130 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4733 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4733 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_130-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_33-debugsource-15-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_130-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_33-debugsource-15-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:30:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:30:14 -0000 Subject: SUSE-SU-2026:4734-1: important: Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5) Message-ID: <179244181410.161.17106893604681014976@816288a415ff> # Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4734-1 Release Date: 2026-10-19T12:34:15Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.141 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4734 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4734 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_36-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-11-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_36-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_141-default-11-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:30:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:30:47 -0000 Subject: SUSE-SU-2026:4744-1: important: Security update for python3, python3-base, python3-doc Message-ID: <179244184715.161.18117123443240236987@816288a415ff> # Security update for python3, python3-base, python3-doc Announcement ID: SUSE-SU-2026:4744-1 Release Date: 2026-10-19T15:01:40Z Rating: important References: * bsc#1267974 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2025-4435 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3276 * CVE-2026-6879 * CVE-2026-7774 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2025-4435 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2025-4435 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python3: * Update bundled setuptools wheels to setuptools-40.6.2 (bsc#1276903). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4744 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4744 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libpython3_4m1_0-debuginfo-3.4.10-25.199.1 * python3-devel-3.4.10-25.199.1 * python3-tk-debuginfo-3.4.10-25.199.1 * python3-curses-3.4.10-25.199.1 * python3-base-3.4.10-25.199.1 * python3-3.4.10-25.199.1 * python3-base-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-3.4.10-25.199.1 * python3-curses-debuginfo-3.4.10-25.199.1 * python3-debuginfo-3.4.10-25.199.1 * python3-tk-3.4.10-25.199.1 * python3-debugsource-3.4.10-25.199.1 * python3-base-debugsource-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython3_4m1_0-32bit-3.4.10-25.199.1 * python3-base-debuginfo-32bit-3.4.10-25.199.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (ppc64le s390x x86_64) * python3-devel-debuginfo-3.4.10-25.199.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython3_4m1_0-debuginfo-3.4.10-25.199.1 * python3-devel-3.4.10-25.199.1 * python3-base-debuginfo-32bit-3.4.10-25.199.1 * python3-tk-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-debuginfo-32bit-3.4.10-25.199.1 * python3-devel-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-32bit-3.4.10-25.199.1 * python3-curses-3.4.10-25.199.1 * python3-base-3.4.10-25.199.1 * python3-3.4.10-25.199.1 * python3-base-debuginfo-3.4.10-25.199.1 * libpython3_4m1_0-3.4.10-25.199.1 * python3-curses-debuginfo-3.4.10-25.199.1 * python3-debuginfo-3.4.10-25.199.1 * python3-tk-3.4.10-25.199.1 * python3-debugsource-3.4.10-25.199.1 * python3-base-debugsource-3.4.10-25.199.1 ## References: * https://www.suse.com/security/cve/CVE-2025-4435.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:31:13 -0000 Subject: SUSE-SU-2026:4743-1: important: Security update for python36 Message-ID: <179244187387.161.14220028317116395601@816288a415ff> # Security update for python36 Announcement ID: SUSE-SU-2026:4743-1 Release Date: 2026-10-19T15:00:55Z Rating: important References: * bsc#1259735 * bsc#1259989 * bsc#1261970 * bsc#1262429 * bsc#1264962 * bsc#1267974 * bsc#1273091 * bsc#1273148 * bsc#1274683 * bsc#1274743 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2026-13346 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-1703 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-4224 * CVE-2026-6879 * CVE-2026-7210 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 16 vulnerabilities and has one security fix can now be installed. ## Description: This update for python36 fixes the following issues: Security issues fixed: * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1274743). * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429). * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). * CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: * Update bundled setuptools wheels to setuptools-44.1.1-py2.py3-none-any.whl (bsc#1277271) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4743 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4743 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python36-devel-3.6.15-125.1 * libpython3_6m1_0-3.6.15-125.1 * python36-base-3.6.15-125.1 * python36-debuginfo-3.6.15-125.1 * libpython3_6m1_0-debuginfo-3.6.15-125.1 * python36-3.6.15-125.1 * python36-base-debuginfo-3.6.15-125.1 * python36-debugsource-3.6.15-125.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython3_6m1_0-32bit-3.6.15-125.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-125.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpython3_6m1_0-32bit-3.6.15-125.1 * libpython3_6m1_0-debuginfo-32bit-3.6.15-125.1 * python36-devel-3.6.15-125.1 * libpython3_6m1_0-3.6.15-125.1 * python36-base-3.6.15-125.1 * python36-debuginfo-3.6.15-125.1 * libpython3_6m1_0-debuginfo-3.6.15-125.1 * python36-3.6.15-125.1 * python36-base-debuginfo-3.6.15-125.1 * python36-debugsource-3.6.15-125.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262429 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1273091 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1274743 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:31:21 -0000 Subject: SUSE-SU-2026:4740-1: important: Security update for kubernetes Message-ID: <179244188165.161.2335018369799152433@816288a415ff> # Security update for kubernetes Announcement ID: SUSE-SU-2026:4740-1 Release Date: 2026-10-19T13:00:27Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4740 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4740 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-1.37.0-150600.13.45.1 * kubernetes1.37-client-common-1.37.0-150600.13.45.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.37-client-fish-completion-1.37.0-150600.13.45.1 * kubernetes1.37-client-bash-completion-1.37.0-150600.13.45.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-1.37.0-150600.13.45.1 * kubernetes1.37-client-common-1.37.0-150600.13.45.1 * Containers Module 15-SP7 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.45.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:31:41 -0000 Subject: SUSE-SU-2026:4739-1: important: Security update for libsoup2 Message-ID: <179244190138.161.15545213678643274681@816288a415ff> # Security update for libsoup2 Announcement ID: SUSE-SU-2026:4739-1 Release Date: 2026-10-19T12:59:39Z Rating: important References: * bsc#1271446 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1273156 * bsc#1275988 * bsc#1276759 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 * CVE-2026-77014 * CVE-2026-77680 CVSS scores: * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-77014 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77014 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77680 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77680 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup2 fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-77014: Integer truncation in sort_ranges() comparator causes silent omission of HTTP Range responses (bsc#1275988). * CVE-2026-77680: quadratic CPU denial of service in HTTP Range coalescing after the CVE-2025-32907 fix (bsc#1276759). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4739 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4739 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4739 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4739 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4739 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4739 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4739 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4739 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4739 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4739 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4739 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4739 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4739 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4739 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (x86_64) * libsoup-2_4-1-32bit-debuginfo-2.74.3-150400.3.43.1 * libsoup2-devel-32bit-2.74.3-150400.3.43.1 * libsoup-2_4-1-32bit-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libsoup-2_4-1-64bit-2.74.3-150400.3.43.1 * libsoup2-devel-64bit-2.74.3-150400.3.43.1 * libsoup-2_4-1-64bit-debuginfo-2.74.3-150400.3.43.1 * openSUSE Leap 15.4 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsoup2-devel-2.74.3-150400.3.43.1 * typelib-1_0-Soup-2_4-2.74.3-150400.3.43.1 * libsoup2-debugsource-2.74.3-150400.3.43.1 * libsoup-2_4-1-debuginfo-2.74.3-150400.3.43.1 * libsoup-2_4-1-2.74.3-150400.3.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * libsoup2-lang-2.74.3-150400.3.43.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://www.suse.com/security/cve/CVE-2026-77014.html * https://www.suse.com/security/cve/CVE-2026-77680.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1275988 * https://bugzilla.suse.com/show_bug.cgi?id=1276759 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:31:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:4738-1: important: Security update for python Message-ID: <179244190935.161.9836570463798033757@816288a415ff> # Security update for python Announcement ID: SUSE-SU-2026:4738-1 Release Date: 2026-10-19T12:58:14Z Rating: important References: * bsc#1280459 Cross-References: * CVE-2026-82049 CVSS scores: * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issue: * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4738 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.136.1 * python-debuginfo-2.7.18-150000.136.1 * python-xml-2.7.18-150000.136.1 * python-2.7.18-150000.136.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.136.1 * python-gdbm-2.7.18-150000.136.1 * libpython2_7-1_0-2.7.18-150000.136.1 * python-curses-2.7.18-150000.136.1 * python-debugsource-2.7.18-150000.136.1 * python-xml-debuginfo-2.7.18-150000.136.1 * python-curses-debuginfo-2.7.18-150000.136.1 * python-base-debugsource-2.7.18-150000.136.1 * python-gdbm-debuginfo-2.7.18-150000.136.1 * python-base-debuginfo-2.7.18-150000.136.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:32:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:32:12 -0000 Subject: SUSE-SU-2026:4736-1: important: Security update for MozillaThunderbird Message-ID: <179244193203.161.5552165347378104644@816288a415ff> # Security update for MozillaThunderbird Announcement ID: SUSE-SU-2026:4736-1 Release Date: 2026-10-19T12:57:04Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275108 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-110249 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 86 vulnerabilities can now be installed. ## Description: This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 153.5 (MFSA 2026-110, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. * CVE-2026-110249: Denial-of-service in the Exchange email component. libexpat updated: * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service (bsc#1275108). * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service (bsc#1275108). * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption (bsc#1275108). * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption (bsc#1275108). * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks (bsc#1275108). * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption (bsc#1275108). * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service (bsc#1275108). * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275108). * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption (bsc#1275108). * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c (bsc#1275736). * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service (bsc#1275605). * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash (bsc#1275736). * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks (bsc#1275736). * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption (bsc#1275736). * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters (bsc#1282347). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4736 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4736 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4736 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * MozillaThunderbird-translations-other-153.5.0-150400.13.9.1 * MozillaThunderbird-translations-common-153.5.0-150400.13.9.1 * MozillaThunderbird-153.5.0-150400.13.9.1 * MozillaThunderbird-debugsource-153.5.0-150400.13.9.1 * MozillaThunderbird-debuginfo-153.5.0-150400.13.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-110249.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275108 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 19 20:32:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 19 Oct 2026 20:32:22 -0000 Subject: SUSE-SU-2026:4735-1: moderate: Security update for alsa Message-ID: <179244194286.161.14796175452055947871@816288a415ff> # Security update for alsa Announcement ID: SUSE-SU-2026:4735-1 Release Date: 2026-10-19T12:56:35Z Rating: moderate References: * bsc#1282563 * bsc#1282564 Cross-References: * CVE-2026-96674 * CVE-2026-96675 CVSS scores: * CVE-2026-96674 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96674 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-96674 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96674 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-96675 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-96675 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-96675 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96675 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for alsa fixes the following issues: * CVE-2026-96674: computation of combined topology element size using 32-bit arithmetic in `src/topology/ctl.c` allows for integer overflow that can cause sensitive data leak and application crashes (bsc#1282564). * CVE-2026-96675: failure to validate sparse binding indices before array access when processing ALSA configuration files can lead to an assertion failure and an application abort (bsc#1282563). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4735 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4735 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * libasound2-debuginfo-1.2.8-150500.3.6.1 * libasound2-1.2.8-150500.3.6.1 * alsa-devel-1.2.8-150500.3.6.1 * alsa-1.2.8-150500.3.6.1 * alsa-debugsource-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (x86_64) * libatopology2-32bit-1.2.8-150500.3.6.1 * alsa-topology-devel-32bit-1.2.8-150500.3.6.1 * alsa-devel-32bit-1.2.8-150500.3.6.1 * libasound2-32bit-1.2.8-150500.3.6.1 * libatopology2-32bit-debuginfo-1.2.8-150500.3.6.1 * libasound2-32bit-debuginfo-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (aarch64_ilp32) * alsa-devel-64bit-1.2.8-150500.3.6.1 * alsa-topology-devel-64bit-1.2.8-150500.3.6.1 * libatopology2-64bit-debuginfo-1.2.8-150500.3.6.1 * libasound2-64bit-1.2.8-150500.3.6.1 * libasound2-64bit-debuginfo-1.2.8-150500.3.6.1 * libatopology2-64bit-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (noarch) * alsa-docs-1.2.8-150500.3.6.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le x86_64) * libatopology2-debuginfo-1.2.8-150500.3.6.1 * libatopology2-1.2.8-150500.3.6.1 * alsa-topology-devel-1.2.8-150500.3.6.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libasound2-debuginfo-1.2.8-150500.3.6.1 * alsa-debugsource-1.2.8-150500.3.6.1 * libasound2-1.2.8-150500.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96674.html * https://www.suse.com/security/cve/CVE-2026-96675.html * https://bugzilla.suse.com/show_bug.cgi?id=1282563 * https://bugzilla.suse.com/show_bug.cgi?id=1282564 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 08:30:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 08:30:19 -0000 Subject: SUSE-SU-2026:4746-1: important: Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) Message-ID: <179248501957.8583.12417780871462411639@6232765b24e4> # Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4746-1 Release Date: 2026-10-19T20:05:34Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.136 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4745 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4746 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4745 SUSE-2026-4746 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_31-debugsource-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-18-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-14-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_31-debugsource-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-18-150500.2.1 * kernel-livepatch-5_14_21-150500_55_124-default-debuginfo-18-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_35-debugsource-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-14-150500.2.1 * kernel-livepatch-5_14_21-150500_55_136-default-debuginfo-14-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 12:30:26 -0000 Subject: SUSE-SU-2026:24194-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179249942636.1171.10271232324782590693@e2c34509880b> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24194-1 Release Date: 2026-10-15T16:47:57Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1920 ## Package List: * SUSE Linux Micro 6.2 (aarch64 x86_64) * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * SUSE Linux Micro 6.2 (aarch64) * nvidia-open-driver-G07-signed-cuda-kmp-64kb-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 12:30:36 -0000 Subject: SUSE-SU-2026:24193-1: moderate: Security update for p11-kit Message-ID: <179249943675.1171.6533344383441661513@e2c34509880b> # Security update for p11-kit Announcement ID: SUSE-SU-2026:24193-1 Release Date: 2026-10-15T12:13:14Z Rating: moderate References: * bsc#1269664 * bsc#1280702 Cross-References: * CVE-2026-13757 * CVE-2026-18938 CVSS scores: * CVE-2026-13757 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-13757 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities can now be installed. ## Description: This update for p11-kit fixes the following issues: * CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). * CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1919 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libp11-kit0-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13757.html * https://www.suse.com/security/cve/CVE-2026-18938.html * https://bugzilla.suse.com/show_bug.cgi?id=1269664 * https://bugzilla.suse.com/show_bug.cgi?id=1280702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 12:30:47 -0000 Subject: SUSE-SU-2026:4748-1: important: Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) Message-ID: <179249944754.1171.14705471714623703748@e2c34509880b> # Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4748-1 Release Date: 2026-10-20T00:34:09Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.133 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4748 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4748 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_133-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-15-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_133-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_133-default-debuginfo-15-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_34-debugsource-15-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 12:30:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 12:30:52 -0000 Subject: SUSE-SU-2026:4747-1: important: Security update for podman Message-ID: <179249945258.1171.1970934821167989423@e2c34509880b> # Security update for podman Announcement ID: SUSE-SU-2026:4747-1 Release Date: 2026-10-19T21:36:31Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4747 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4747 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4747 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4747 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4747 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4747 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4747 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4747 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4747 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podmansh-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * podman-debuginfo-4.9.5-150400.4.83.1 * podman-remote-debuginfo-4.9.5-150400.4.83.1 * podman-remote-4.9.5-150400.4.83.1 * podman-4.9.5-150400.4.83.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * podman-docker-4.9.5-150400.4.83.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:30:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4749-1: important: Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5) Message-ID: <179251381596.1832.1988043120172437657@816288a415ff> # Security update for the Linux Kernel (Live Patch 37 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4749-1 Release Date: 2026-10-20T11:34:21Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.144 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4749 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4755 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4755 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_275-default-17-2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_37-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-11-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_37-debugsource-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-debuginfo-11-150500.2.1 * kernel-livepatch-5_14_21-150500_55_144-default-11-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 16:31:00 -0000 Subject: SUSE-SU-2026:4754-1: important: Security update for python3 Message-ID: <179251386099.1832.5367267624224677158@816288a415ff> # Security update for python3 Announcement ID: SUSE-SU-2026:4754-1 Release Date: 2026-10-20T10:52:20Z Rating: important References: * bsc#1257599 * bsc#1259735 * bsc#1259989 * bsc#1261970 * bsc#1262467 * bsc#1263083 * bsc#1263443 * bsc#1264962 * bsc#1265268 * bsc#1266669 * bsc#1267581 * bsc#1267821 * bsc#1267974 * bsc#1268977 * bsc#1269066 * bsc#1269788 * bsc#1269959 * bsc#1271192 * bsc#1273091 * bsc#1273148 * bsc#1274683 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1276903 * bsc#1277111 * bsc#1277271 * bsc#1280459 Cross-References: * CVE-2026-0864 * CVE-2026-11940 * CVE-2026-11972 * CVE-2026-13346 * CVE-2026-15308 * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-1703 * CVE-2026-17084 * CVE-2026-18503 * CVE-2026-19672 * CVE-2026-3219 * CVE-2026-3276 * CVE-2026-3446 * CVE-2026-3479 * CVE-2026-4224 * CVE-2026-4360 * CVE-2026-6019 * CVE-2026-6357 * CVE-2026-6879 * CVE-2026-7210 * CVE-2026-7774 * CVE-2026-82049 * CVE-2026-8328 * CVE-2026-8643 * CVE-2026-9669 CVSS scores: * CVE-2026-0864 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-0864 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-0864 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-0864 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-11940 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-11940 ( NVD ): 7.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11972 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11972 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-11972 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( SUSE ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-13346 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-13346 ( NVD ): 5.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13346 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-15308 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-15308 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15308 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15308 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-1703 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-1703 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-1703 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-18503 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18503 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-18503 ( NVD ): 2.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3219 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3219 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-3219 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3276 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-3276 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-3276 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3446 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-3446 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-3446 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3479 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-3479 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-3479 ( NVD ): 0.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-4224 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4224 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4224 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-4360 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-4360 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-4360 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-4360 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6019 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( SUSE ): 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N * CVE-2026-6019 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6019 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-6357 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-6357 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N * CVE-2026-6357 ( NVD ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-6879 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-6879 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-6879 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-7210 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7210 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-7210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-7774 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-7774 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-7774 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8328 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-8328 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-8328 ( NVD ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-8643 ( NVD ): 4.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-8643 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-8643 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.3 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 26 vulnerabilities and has two security fixes can now be installed. ## Description: This update for python3 fixes the following issues: Security issues fixed: * CVE-2026-0864: improper handling of line-ending characters can lead to configuration file injection when the `configparser` module is used (bsc#1269066). * CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives (bsc#1257599 bsc#1274743). * CVE-2026-3219: pip doesn't reject concatenated ZIP (bsc#1262429 bsc#1262467). * CVE-2026-3276: quadratic complexity in `unicodedata.normalize()` can lead to DoS when processing specially crafted Unicode input (bsc#1267581). * CVE-2026-3446: Base64 decoding stops at first padded quad by default (bsc#1261970). * CVE-2026-3479: python: improper resource argument validation can allow path traversal (bsc#1259989). * CVE-2026-4224: C stack overflow when parsing XML with deeply nested DTD content models (bsc#1259735). * CVE-2026-4360: in the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks (bsc#1269959). * CVE-2026-6357: pip self-update functionality can import newly installed modules after wheel installation (bsc#1263442 bsc#1263443). * CVE-2026-6879: quadratic behavior in `xml.etree.ElementPath` index predicates can lead to a denial of service via high CPU usage (bsc#1273148). * CVE-2026-7210: `xml.parsers.expat` and `xml.etree.ElementTree` use insufficient entropy for Expat hash-flooding protection (bsc#1264962). * CVE-2026-7774: `tarfile.data_filter` path traversal bypass allows writing outside the extraction directory (bsc#1267821). * CVE-2026-8328: `ftpcp()` does not use actual peer address and trusts server- supplied PASV host address (bsc#1265268). * CVE-2026-8643: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite (bsc#1266669). * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-11940: tarfile extraction filter bypass via a crafted archive allows escaping the destination directory and enables arbitrary file reads and writes (bsc#1268977). * CVE-2026-11972: infinite loop due to improper EOF handling in the tarfile module streaming mode can lead to DoS (bsc#1269788). * CVE-2026-13346: Arbitrary file installation via malicious package indexes (bsc#1273090 bsc#1273091 bsc#1273094). * CVE-2026-15308: Incremental HTMLParser allows CPU-exhaustion DoS via repeated unterminated markup declarations (bsc#1271192). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-18503: attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU (bsc#1274683). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Non security issue fixed: * Fix an error that returned non-zero exit status 1 (bsc#1277271). * Fix regression in `http.cookies` (bsc#1263083). * Update bundled pip wheels to pip-20.0.2-py2.py3-none-any.whl. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4754 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4754 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4754 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4754 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4754 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4754 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4754 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4754 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4754 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4754 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4754 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4754 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4754 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4754 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4754 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4754 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-testsuite-3.6.15-150300.10.129.1 * python3-doc-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-testsuite-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-doc-devhelp-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * openSUSE Leap 15.3 (x86_64) * libpython3_6m1_0-32bit-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-32bit-3.6.15-150300.10.129.1 * openSUSE Leap 15.3 (aarch64_ilp32) * libpython3_6m1_0-64bit-3.6.15-150300.10.129.1 * libpython3_6m1_0-64bit-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python3-tools-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python3-debugsource-3.6.15-150300.10.129.1 * python3-tools-3.6.15-150300.10.129.1 * python3-3.6.15-150300.10.129.1 * libpython3_6m1_0-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-debuginfo-3.6.15-150300.10.129.1 * python3-devel-debuginfo-3.6.15-150300.10.129.1 * python3-debuginfo-3.6.15-150300.10.129.1 * python3-tk-3.6.15-150300.10.129.1 * python3-base-3.6.15-150300.10.129.1 * python3-curses-debuginfo-3.6.15-150300.10.129.1 * libpython3_6m1_0-3.6.15-150300.10.129.1 * python3-core-debugsource-3.6.15-150300.10.129.1 * python3-devel-3.6.15-150300.10.129.1 * python3-base-debuginfo-3.6.15-150300.10.129.1 * python3-idle-3.6.15-150300.10.129.1 * python3-tk-debuginfo-3.6.15-150300.10.129.1 * python3-dbm-3.6.15-150300.10.129.1 * python3-curses-3.6.15-150300.10.129.1 ## References: * https://www.suse.com/security/cve/CVE-2026-0864.html * https://www.suse.com/security/cve/CVE-2026-11940.html * https://www.suse.com/security/cve/CVE-2026-11972.html * https://www.suse.com/security/cve/CVE-2026-13346.html * https://www.suse.com/security/cve/CVE-2026-15308.html * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-1703.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-18503.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-3219.html * https://www.suse.com/security/cve/CVE-2026-3276.html * https://www.suse.com/security/cve/CVE-2026-3446.html * https://www.suse.com/security/cve/CVE-2026-3479.html * https://www.suse.com/security/cve/CVE-2026-4224.html * https://www.suse.com/security/cve/CVE-2026-4360.html * https://www.suse.com/security/cve/CVE-2026-6019.html * https://www.suse.com/security/cve/CVE-2026-6357.html * https://www.suse.com/security/cve/CVE-2026-6879.html * https://www.suse.com/security/cve/CVE-2026-7210.html * https://www.suse.com/security/cve/CVE-2026-7774.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-8328.html * https://www.suse.com/security/cve/CVE-2026-8643.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1257599 * https://bugzilla.suse.com/show_bug.cgi?id=1259735 * https://bugzilla.suse.com/show_bug.cgi?id=1259989 * https://bugzilla.suse.com/show_bug.cgi?id=1261970 * https://bugzilla.suse.com/show_bug.cgi?id=1262467 * https://bugzilla.suse.com/show_bug.cgi?id=1263083 * https://bugzilla.suse.com/show_bug.cgi?id=1263443 * https://bugzilla.suse.com/show_bug.cgi?id=1264962 * https://bugzilla.suse.com/show_bug.cgi?id=1265268 * https://bugzilla.suse.com/show_bug.cgi?id=1266669 * https://bugzilla.suse.com/show_bug.cgi?id=1267581 * https://bugzilla.suse.com/show_bug.cgi?id=1267821 * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1268977 * https://bugzilla.suse.com/show_bug.cgi?id=1269066 * https://bugzilla.suse.com/show_bug.cgi?id=1269788 * https://bugzilla.suse.com/show_bug.cgi?id=1269959 * https://bugzilla.suse.com/show_bug.cgi?id=1271192 * https://bugzilla.suse.com/show_bug.cgi?id=1273091 * https://bugzilla.suse.com/show_bug.cgi?id=1273148 * https://bugzilla.suse.com/show_bug.cgi?id=1274683 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1276903 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1277271 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 16:31:22 -0000 Subject: SUSE-SU-2026:4753-1: important: Security update for ImageMagick Message-ID: <179251388296.1832.9409033734070319834@816288a415ff> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4753-1 Release Date: 2026-10-20T10:49:50Z Rating: important References: * bsc#1281912 * bsc#1284662 * bsc#1284664 * bsc#1284665 * bsc#1284668 * bsc#1284669 * bsc#1284675 * bsc#1284678 * bsc#1284680 * bsc#1284681 * bsc#1284682 * bsc#1284683 * bsc#1285071 Cross-References: * CVE-2026-106565 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106577 * CVE-2026-106579 * CVE-2026-106580 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-109259 * CVE-2026-109260 * CVE-2026-109261 * CVE-2026-109262 * CVE-2026-109263 * CVE-2026-109266 * CVE-2026-109269 * CVE-2026-109273 * CVE-2026-109275 * CVE-2026-109276 * CVE-2026-46521 * CVE-2026-61869 * CVE-2026-93586 CVSS scores: * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106580 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-106580 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109259 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109259 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109259 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109260 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109260 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109260 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109261 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109262 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109263 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109263 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109266 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109266 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-109269 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109269 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109273 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109273 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109275 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109275 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-109276 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109276 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-46521 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-46521 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-61869 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-61869 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-61869 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-61869 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 24 vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash (bsc#1284680). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). * CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071). * CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071). * CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071). * CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071). * CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071). * CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071). * CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071). * CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071). * CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071). * CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4753 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4753 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * ImageMagick-debuginfo-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * libMagickCore-6_Q16-1-6.8.8.1-71.280.1 * ImageMagick-devel-6.8.8.1-71.280.1 * libMagick++-devel-6.8.8.1-71.280.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.280.1 * ImageMagick-debugsource-6.8.8.1-71.280.1 * ImageMagick-config-6-upstream-6.8.8.1-71.280.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libMagickCore-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * ImageMagick-debuginfo-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-6.8.8.1-71.280.1 * libMagickWand-6_Q16-1-debuginfo-6.8.8.1-71.280.1 * libMagickCore-6_Q16-1-6.8.8.1-71.280.1 * ImageMagick-devel-6.8.8.1-71.280.1 * libMagick++-devel-6.8.8.1-71.280.1 * ImageMagick-config-6-SUSE-6.8.8.1-71.280.1 * ImageMagick-debugsource-6.8.8.1-71.280.1 * ImageMagick-config-6-upstream-6.8.8.1-71.280.1 ## References: * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-106580.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-109259.html * https://www.suse.com/security/cve/CVE-2026-109260.html * https://www.suse.com/security/cve/CVE-2026-109261.html * https://www.suse.com/security/cve/CVE-2026-109262.html * https://www.suse.com/security/cve/CVE-2026-109263.html * https://www.suse.com/security/cve/CVE-2026-109266.html * https://www.suse.com/security/cve/CVE-2026-109269.html * https://www.suse.com/security/cve/CVE-2026-109273.html * https://www.suse.com/security/cve/CVE-2026-109275.html * https://www.suse.com/security/cve/CVE-2026-109276.html * https://www.suse.com/security/cve/CVE-2026-46521.html * https://www.suse.com/security/cve/CVE-2026-61869.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284680 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 * https://bugzilla.suse.com/show_bug.cgi?id=1285071 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 16:31:32 -0000 Subject: SUSE-SU-2026:4750-1: important: Security update for rekor Message-ID: <179251389240.1832.11626743451796533765@816288a415ff> # Security update for rekor Announcement ID: SUSE-SU-2026:4750-1 Release Date: 2026-10-20T09:09:12Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rekor rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4750 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4750 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4750 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4750 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4750 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4750 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4750 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4750 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4750 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4750 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4750 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4750 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.40.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.40.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.40.1 * rekor-1.4.3-150400.4.40.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 16:31:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 16:31:44 -0000 Subject: SUSE-SU-2026:3547-2: moderate: Security update for suseconnect-ng Message-ID: <179251390463.1832.12218868975021247119@816288a415ff> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:3547-2 Release Date: 2026-10-20T08:17:54Z Rating: moderate References: * bsc#1159776 * bsc#1267478 * bsc#1268596 * bsc#1268900 * bsc#1270392 Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has five security fixes can now be installed. ## Description: This update for suseconnect-ng fixes the following issue: * Update version to 1.23.0: * Use product identifier for product migrations. (bsc#1268596) * Switch to using go1.26-openssl as the default Go version to install to support building the package (jsc#SCC-843, bsc#1268900). * Fix flag parsing so that unknown flags or options are flagged as an error and the usage message is displayed. (bsc#1159776) * InstallReleasePackage interactive/noninteractive handling should be consistent with DistUpgrade (bsc#1267478). * Add new optional rpm_packages collector, disabled by default, to collect list of installed SUSE vendored RPM packages. (jsc#TEL-298) * Allow deregsiter when subscribed regcode has expired (bsc#1270392, jsc#865) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-3547 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-3547 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-3547 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-3547 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.48.1 * suseconnect-ng-1.23.0-150500.3.48.1 * libsuseconnect-1.23.0-150500.3.48.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1159776 * https://bugzilla.suse.com/show_bug.cgi?id=1267478 * https://bugzilla.suse.com/show_bug.cgi?id=1268596 * https://bugzilla.suse.com/show_bug.cgi?id=1268900 * https://bugzilla.suse.com/show_bug.cgi?id=1270392 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:30:41 -0000 Subject: SUSE-SU-2026:24251-1: important: Security update for pacemaker Message-ID: <179252824117.2203.10989070667220881907@816288a415ff> # Security update for pacemaker Announcement ID: SUSE-SU-2026:24251-1 Release Date: 2026-10-09T11:53:26Z Rating: important References: * bsc#1180966 * bsc#1249217 * bsc#1255371 * bsc#1259345 * bsc#1265183 * bsc#1265201 * bsc#1268381 * bsc#1270354 * bsc#1271652 * bsc#1272452 * bsc#1279543 Cross-References: * CVE-2026-10649 CVSS scores: * CVE-2026-10649 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has 10 fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: Security issue fixed: * CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: * cts: make cts-scheduler -o/--out-dir default to a temporary directory (bsc#1272452) * spec: Add symlinks for test support files in the pacemaker-cts sub-package (bsc#1272452) * cts: Do not install test support files into /usr at runtime (bsc#1272452) * libcrmcommon: Make pcmk__auto_fencing_watchdog_timeout() static * libcrmcommon: Functionize parsing "fencing-watchdog-timeout" * liblrmd: Check watchdog-based self-fencing device for remote nodes only if "fencing-watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * controller: Check for watchdog-based self-fencing device only if "fencing- watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * fencer: Avoid use-after-free in debug log (bsc#1279543, gh#ClusterLabs/pacemaker#4172) * fenced: Prevent segfault by not merging with in-flight fencing actions (bsc#1271652, gh#ClusterLabs/pacemaker##4152) * ChangeLog: update for 3.0.3 release * Build: update version information for 3.0.3 * libraries: update shared object versions for 3.0.3 * NLS: update translations before 3.0.3-rc1 * cibadmin: allow altering status section without triggering refresh (gh#ClusterLabs/pacemaker#4147) * tools: Use g_spawn_sync in cibsecret. * tools: Handle UTF-8 parameters in crm_resource. * tools: Handle UTF-8 parameters in cibsecret. * agents: Move pid file management into ClusterMon.in. * libcib: Remove an unnecessary coverity suppression. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix an integer overflow in pcmk__remote_send_xml. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Limit the max size of a remote message. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix integer overflow in remote message code. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix checks in localized_remote_header. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * liblrmd: Don't include internal header in lrmd.h * Low: libcrmcommon, tools: Fix NULL dereference in crm_resource.c * pacemakerd: Properly find and track all existing sub-daemons (bsc#1265201, gh#ClusterLabs/pacemaker#4115) * tools: Use the VERSION variable instead of invoking `crm_attribute --version` (bsc#1265183, gh#ClusterLabs/pacemaker#4114) * libcib: Handle cib_xpath_address for an XPath query for an attribute (gh#ClusterLabs/pacemaker#4108) * libcib: Prevent based or cibadmin from crashing when handling an XPath query for an attribute (bsc#1249217, gh#ClusterLabs/pacemaker#4108) * libcrmcommon: Deprecate PCMK_dh_max_bits. * libcib: Full-CIB replace op no longer segfaults with cib_xpath * libpe_status: Avoid leaking a pcmk_resource_t's xml/orig_xml * Revert "API: libraries: Update version numbers in so names" * ChangeLog: update for 3.0.2-rc1 release * tools: Avoid memory leak in crm_resource --clear * libpacemaker, tools: Avoid mem leak in crm_simulate/pcmk_simulate() * libcib: Avoid memory leak when processing CIB upgrade * libpe_status: Use first operations child when expanding template * libpe_status: Improve no resources message in unpack_template() * daemons: Only log a message if we're falling back. * update version information for 3.0.2 * libraries: Update version numbers in so names * libraries: update shared object versions for 3.0.2 * NLS: update translations before 3.0.2-rc1 * libcrmcommon: Deprecate anonymous authentication. * libcrmcommon: Deprecate remote-clear-port. * libcib: Add support for PSK authentication for remote CIB ops. * daemons: Add support for PSK authentication for remote CIB ops. * libpacemaker: Fix a memory leak in inject_action. * tools: Free the list at the end of cli_resource_print_operations. * tools: Fix memory leaks when printing crm_verify warnings/errors. * libpe: If pe__clone_default exits early, free the lists. * libpacemaker: Fix a segfault in order_resource_actions_after. * libcrmcommon: Properly return errno from pcmk__bare_output_new. * libpe: Free elements of rsc->priv->ticket_constraints... * libpacemaker: If process_rsc_history exits early, free the list. * daemons,libcib: Fix memory leaks in IPC code. * libservices: Deal with fgets errors in services__get_lsb_metadata. * libpacemaker: Check that instance is not NULL. * libcrmcommon: Avoid overflow when negating INT_MIN * libcrmcommon: Avoid overflow in crm_time_add_months() * libcib: Explicitly handle receiving a NACK from based. * libcib: Explicitly handle receiving a NACK from fenced. * daemons: Don't NACK an invalid remote message. * libcrmcommon: Don't log on error in pcmk__ipc_send_iov. * daemons: Don't return a NACK if execd gets an unknown message. * liblrmd: Explicitly handle receiving a NACK from execd. * liblrmd: Fix log messages in remote_proxy_cb. * daemons: Delay creating an xmlNode in handle_register_request. * libcrmcommon: Ignore empty time spec * tools: Don't wait on certain "pending" monitor actions. (gh#ClusterLabs/pacemaker#4073) * libcrmcommon: Create a log file if it doesn't exist. * fencer: Disable watchdog-based self-fencing if "fencing-watchdog-timeout" is unset (gh#ClusterLabs/pacemaker#4067) * fencer: Make the deprecated "stonith-watchdog-timeout" option work again (gh#ClusterLabs/pacemaker#4068) * libcrmcommon: Move deprecatd PCMK_OPT_STONITH_TIMEOUT back to options.h * pacemakerd: Correctly detect ping requests from sbd (gh#ClusterLabs/pacemaker#4066) * libcrmcommon: Improve message for qb_log_file_open() fail * libcrmcommon: Improve pcmk__add_logfile() message for fopen() fail * libcrmcommon: More specific error for set_logfile_permissions() * libcrmcommon: Improve validation of PCMK_logfile_mode * liblrmd: Don't assert if queue_time is < 0. * based: Don't log specially for PCMK__XA_CIB_UPDATE * controller: Don't treat patchset-apply errors as OK * libcrmcommon: xml_apply_patchset doesn't return diff_resync err * libcib: Don't convert -pcmk_err_diff_resync to pcmk_ok * libcrmcommon: Handle NULL PCMK_XA_FORMAT and PCMK_XA_DIGEST * libcib, tools: Empty CIB contains admin_epoch before epoch * daemons: Fix user/group checking in based. * libcrmcommon: Fix a glib logging build error. * libcrmcommon: Don't delete unchanged attributes when applying patch * libcrmcommon: Fix potential use-after-free and double-free (gh#ClusterLabs/pacemaker#4044) * executor: Fix the typos in the logs. * libcrmcommon: Set config warnings on mismatched ACL perm specs * libcrmcommon: xml_acl_filtered_copy() returns false for NULL source (gh#ClusterLabs/pacemaker#4039) * libcrmcommon: Make parse_acl_entry() non-recursive * libcrmcommon: Set config warnings and errors for acl_permission * libcib: Log correct error message in replace_cib() * libcib: Fix setting origin attributes in CIB updates (gh#ClusterLabs/pacemaker#4028) * tools: Drop crm_attribute --inhibit-policy-engine/-i option * libcrmcommon: Fix memory leak in pcmk__read_series_sequence() (gh#ClusterLabs/pacemaker#4032) * liblrmd: Check that pcmk__init_tls doesn't set native->tls to NULL. * tools: Drop crm_attribute --attr-value/--delete-attr options * tools: Drop crm_attribute --attr-id option * based: Drop unhelpful trace messages * based: Improve a log message for IPC call options * libcib: {add,del}_notify_callback support only cib_diff_notify * based: Return correct code from write_cib_async() * daemons: Use crm_ipc_client_response in lrmd_remote_client_msg. * daemons: Set ipc_flags in lrmd_remote_client_msg to 0. * daemons: Clean up XML memory in IPC dispatch functions. * daemons: Fix a segfault displaying fencer metadata. * based: Drop redundant messages from based_diff_notify() * build: Handle CMocka deprecations * various: Always NULL-check return value of pcmk__find_client() * libcrmcommon: Improve messages in child_kill_helper() * tools: Free memory in crm_resource.c:handle_metadata() * pacemakerd: Use g_str_has_prefix() in handle_ping_request() * libpacemaker: Correctly check node types in pcmk__list_nodes() * pacemakerd: Match correctly in PCMK_{valgrind,callgrind}_enabled * libcrmcommon: Match correctly in PCMK_debug, stderr, blackbox * spec: Requires libxml2-tools since DLM controld RA requires xmllint (bsc#1259345) * daemons: Fix a typo if no existing attrd is found. * daemons: Call pcmk_cluster_disconnect at the end of fenced. * libcrmcommon: Fix underflow in crm_time_add_days() * libcrmcommon: Avoid integer overflow in seconds_to_hms() * spec: do not treat fillup templates as configuration files * build: install the default logrotate config into /usr/etc/logrotate.d * build: create directories in /var via tmpfiles.d * build: create hacluster user and haclient group via sysusers.d * agents: Deprecate allow_stonith_disabled param for controld RA * agents: New allow_fencing_disabled param for controld RA * agents: Use case-insensitive property matching in controld RA * schemas: Deprecate stonith-timeout-ms in crm_mon output * schemas: Deprecate stonith-enabled in crm_mon output * various: New fencing-timeout-ms in crm_mon/pcmk_status output * schemas: New fencing-timeout-ms attribute in crm_mon schema * various: New fencing-enabled in crm_mon/pcmk_status output * schemas: New fencing-enabled attribute in crm_mon schema * tools: cibadmin --xpath --delete-all deletes all matches again * various: Use const for a few string pointer variables * cts: Respect cts-lab --nic option if specified for IPv4 (gh#ClusterLabs/pacemaker#3986) * cts: cts-lab --nic option defaults to eth0 only for an IPv6 link local address (gh#ClusterLabs/pacemaker#3986) * controller: Ask attribute manager to purge fenced nodes' attributes * controller: Don't purge transient attributes on node loss (gh#ClusterLabs/pacemaker#3991) * controller: Allow purging node attrs without cache removal * controller: don't need to erase node attributes for remote nodes * pacemaker-attrd: Drop "requesting shutdown" code * pacemaker-attrd: Wipe CIB along with memory (gh#ClusterLabs/pacemaker#3991) * libcrmservice: Correctly check the return value of stat. * fencer: Improve validation of pcmk_host_map * fencer: Drop support for escaped characters in pcmk_host_map * fencer: Drop unhelpful message from build_port_aliases() * fencer: Fix ISO 8601 interval parsing in pcmk_delay_base * daemons: When checking for duplicate messages, we might be prepending. * daemons: Don't add repeated I_PE_CALC messages to the fsa queue. * scheduler: promoted state with promoted state with attribute * fencer: Log an error for empty pcmk_delay_base mapping key * fencer: Fix a format string * libcrmservice: List only the requested directory contents * build, libcrmservice: initdir must be a single directory * libcrmservice: Fix memory leaks when listing directory contents * cts: Add cts-lab --nic option used for generated IP address resources (gh#ClusterLabs/pacemaker#3982) * libcrmcommon: Loop on EAGAIN in mainloop_gio_callback. * daemons: Get rid of some logged warnings in execd. * libcrmcommon: Bump feature set to 3.20.5 * libcrmcommon: Deprecate stop-removed-resources cluster property * libcrmcommon: Deprecate cancel-removed-actions cluster property * libpe_status: Warn if concurrent-fencing is false * libcrmcommon: Deprecate enable-startup-probes cluster property * libcrmcommon: Rename stop-removed-actions to cancel-removed-actions * libcrmcommon: Deprecate cluster-ipc-limit cluster option * cts-cli: Escape special characters in the path for a pattern (gh#ClusterLabs/pacemaker#3971) * tools: Handle large timeouts correctly in crm_resource --wait * controller: NULL-check lrm_state before dereferencing it * tools: cibsecret should work with CIB_file set. * controller: Avoid "stonith" in log messages * tools: Use "fencing" in stonith_admin/crm_resource * libpe_status: Use "fencing" instead of "STONITH" in some logs * libcrmcommon: New "fencing-reaction" cluster property * libcrmcommon: New "fencing-watchdog-timeout" cluster property * libcrmcommon: New "fencing-timeout" cluster property * libcrmcommon: New "fencing-max-attempts" cluster property * libcrmcommon: New "fencing-action" cluster property * libcrmcommon: New "fencing-enabled" cluster property * libcrmcommon: Update documentation for cluster-ipc-limit. * libcrmcommon: Be more lenient in evicting IPC clients. * tools: Deprecate iso8601 command line tool * libcrmcommon: Show deprecated option aliases in outputs * libcrmcommon: Parse iso8601 strings according to spec. * fencer: Prevent unsigned int overflow in get_action_timeout() * libcrmcommon: Fix integer overflow of alert timeouts * libcrmcommon: Ensure stonith watchdog timeout is in long range * controller, fencer: Ignore negative/unparsable pcmk_monitor_timeout * cts: Drop cts script * tools: Drop crm_report -T/--cts and --cts-log options * schemas: Deprecate "orphaned" attribute * schemas: resource XML element has new "removed" attribute * schemas: Deprecate "orphan" attribute in crm_mon and crm_simulate * schemas: resource_history XML element has new "removed" attribute * libcrmcommon: Fix a segfault in internal_ipc_get_reply. (bsc#1255371, gh#ClusterLabs/pacemaker#3949) * libcrmcommon: New "stop-removed-resources" cluster property * libcrmcommon: New "stop-removed-actions" cluster property * sysconfig: Remove --leak-check=full from default VALGRIND_OPTS. * tools: Hide crm_mon --as-xml option * crm_mon: Deprecate --pid-file/-p option * tools: Fix CIB validation in crm_mon.c * libcib, libcrmcommon: Improve a couple of log messages * libcrmcommon: pcmk__quote_cmdline() returns valid shell string * libcrmcommon: Bump feature set to 3.20.4 * schemas: Add a schema for cibadmin * tools: Use formatted output in cibadmin * tools: Formatted output for cibadmin --show-access --query * tools: Formatted output for cibadmin --node-path * tools: Basic cibadmin XML formatted output * tools: Formatted output for cibadmin --empty * tools: Formatted output for cibadmin --md5-sum{,-versioned} * tools: Deprecate cibadmin -e/--node-path option * libcrmcommon: bump feature set to 3.20.3 * schemas: Add a schema for cibsecret. * libcrmcommon: Return a value for md5sum of empty input. * tools: Remove the shell version of cibsecret. * tools: Improve some cibadmin error messages * tools: cibadmin renders ACLs only when output is cib element * tools: cibadmin now errors if unable to compute md5 sum * libcib, tools: Resolve cibadmin TODO re: ACL rendering and input * controller: Avoid crash due to GSource double-free * tools: Deprecate cibadmin -N/--node option * tools: Drop "Digest: " from cibadmin --md5-sum stderr * tools: cibadmin ignores --node-path for non-XPath-query command * tools: Change exit codes for failure to create cib_t object * libcib: Fix cib__signon_retry() return code * tools: Deprecate cibadmin --show-access as non-privileged user * tools: Don't require --force for non-privileged cibadmin ACLs * tools: Default cibadmin command is now --query * tools: Deprecate current input source precedence in cibadmin * tools: Drop cibadmin --extended-version/-! option * libcrmcommon: Bump feature set to 3.20.2 * schemas: Add a schema for crm_diff * tools: Use formatted output in crm_diff.c * libcrmcommon: Standardize remote environment variable parsing * libcrmcommon: Allow empty string values in pcmk__scan_nvpair() * libcrmcommon: Keep trailing newlines in pcmk__scan_nvpair() * fencer: Fix fence delay range off-by-one * daemons: Return CRM_EX_PROTOCOL when ACKing an unknown request. * daemons: Correct result error string on unknown IPC messages. * daemons: Add a return to do_pe_invoke_callback. * tools: Deprecate crm_diff --stdin * tools: Improve error handling in crm_diff.c * tools: Be stricter about crm_diff --cib/--no-version * libcrmcommon: Don't require version info when applying CIB patches * agents: Error check calling attrd_updater in HealthSMART. * agents: Error check calling attrd_updater in HealthIOWait. * agents: Error out if CPU I/O wait time isn't available. * agents: Error check calling attrd_updater in HealthCPU. * agents: Error out if CPU idleness isn't available. * daemons: Don't log the unresponsive message for a daemon we killed * controller: Avoid blocking wait in controller for CIB re-request * cts: Remove --valgrind-tests * cts: Leave valgrind results around if they're not empty. * NLS: update translations before 3.0.1-rc1 * libpacemaker: Prevent CIB growth during crm_simulate --profile * daemons: Fix a toctou bug when fetching additional schemas. * Address coverity issues. * Address certain clang static analysis errors. * libs: Fix cppcheck warnings. * libcrmcommon: bump feature set to 3.20.1 * scheduler: Require a cluster option for old remote fencing behavior. * scheduler: Don't always fence online remote nodes. * daemons: Convert schedulerd to support multipart IPC messages. * daemons: Convert attrd to support multipart IPC messages. * daemons: Convert pacemakerd to support multipart IPC messages. * daemons: Convert execd to support multipart IPC messages. * daemons: Convert fenced to support multipart IPC messages. * daemons: Convert controld to support multipart IPC messages. * daemons: Convert based to support multipart IPC messages. * libcrmcommon: Retry on EAGAIN in crm_ipcs_flush_events. * libcrmcommon: All parts of a multipart event should have the same ID * libcrmcommon: Don't immediately overwrite request ID. * libcrmcommon: Check the client buffer in crm_ipc_buffer. * libcrmcommon: Handle sending multi-part IPC server events. * libcrmcommon: crm_ipc_read can receive large IPC messages. * libcrmcommon: Elements should never match if IDs differ * libcrmcommon: Consistently free iov on error. * libcrmcommon: Always free temp node in mark_child_deleted() * libcrmcommon: Fix XML matching when marking changes * fencer: Don't remove device if child is deleted * controller: Populate nodes from peer cache if can't from cluster * libcib: Don't match element based on XPath matching an attribute * tools: Use correct error code for command lookup failure * tools: Dry-run crm_resource --fail if CIB_file is set * libcrmcommon: Sort schema transformations on non-glibc systems * libcrmcommon: Ensure schema transform numbers are in valid range * libcrmcommon: Match literal dots in schema transform filter * spec: Provides user(hacluster) and group(haclient) * libcrmservice: Fix overrides for systemd resources * libcrmservice: Fail systemd rsc start if create override fails * Build: Run cts-cli verbosely. * controller: improve resource action execution logs * controller: improve start-up/exit messages * controller: drop dot file logs * controller: simplify join finalization messages * pacemaker-based: improve a few messages * pacemaker-based: improve exit messages * pacemaker-based: improve messages when reading CIB from disk * libpacemaker: Reset scheduler object in pcmk_simulate() * libpe_status: Make cluster_status() idempotent * tools: Fix overflow in crm_simulate --repeat * libpacemaker: Handle scandir() error in pcmk__profile_dir() * libpacemaker: Fix mem leak in pcmk__profile_dir() * tools: Avoid crash in crm_simulate --profile * Makefile: drop asciidoc references * crm_diff: Replace variable name * Drop deprecated '\--sync-call' option from cibadmin * Drop deprecated '-l/--local' option from cibadmin in multiple places * raise minimum GnuTLS dependency to 3.4.6 * sysconfig: document when logs may show sensitive info * pacemaker-attrd: reduce log spam at shutdown * executor: avoid misleading log when cancelling a recurring monitor * scheduler: improve restart-needed log * scheduler: don't show node capacity for bundle nodes * scheduler: clarify no-quorum effects * libcrmcommon: improve flag set/clear messages * libcrmcommon: improve message for unsupported XPath match * libstonithd: improve action re-attempt message * libcib: Don't send CRM_OP_REGISTER from cib_remote client * tools: mention potential issues with crm_resource --restart * tools: indicate crm_resource --interval can take units * tools: clarify that crm_mon updates are automatic when interactive * agents: Replace the egrep command with the EGREP definition in ping RA * libcrmcluster: fix format typos * doc: drop Inkscape dependency * tools: validate stonith_admin --timeout value * libpacemaker: set fail-count to INFINITY for fatal failures * libpacemaker: add PCMK__XA_FAILED_START_OFFSET and PCMK__XA_FAILED_STOP_OFFSET * tools: Deprecate cibadmin --sync-call * OCF: controld.in: Remove gfs_controld command as it's already obsoleted * xml: Warn about post-transform behavior changes for ACLs with xpath * sysconfig: Document using certificates for remote nodes. * sysconfig: Explain permissions needed on TLS-related files. * libcrmcluster: restore CPG header size compatibility * libcrmcluster: improve messages in pcmk__cpg_message_data() * liblrmd: Enable TLS support for Pacemaker Remote clients. * daemons: Enable TLS support for Pacemaker Remote nodes. * libcrmcommon: Set *tls = NULL in a few more locations. * libcib: Enable TLS certs for remote CIB operations. * libs: Log if a TLS certificate is close to expiration. * libcrmcommon: If the server supports certs, require them... * daemons: Set up X509 auth in based if enabled. * sysconfig: Add env settings needed for X509 authentication. * libcrmcluster: don't assert for CPG decompression error * libcrmcluster: avoid redundant log for invalid CPG messages * libcrmcluster: initialize from in pcmk__cpg_message_data() * scheduler: avoid memory leak in bundles * xml: Preserve ACL reference behavior for replaced constraints * xml: Ensure ACL permissions are valid after XSL transformations * xml: Warn if schema transformation drops remove-after-stop property * xml: Warn if schema transformation drops moon phase * xml: Info if schema transformation drops empty groups or clones * xml: Warn if schema transformation drops colocation/order lifetimes * xml: Warn if schema transformation drops can_fail or... * xml: Warn if schema transformation drops restart-type meta-attr * xml: Warn if schema transformation drops rkt bundles * xml: Warn if schema transformation drops nagios/upstart resources * log: Allow CIB upgrade messages to start with W, I, D * various: clean up library memory at child exit * pacemaker-remoted: improve exit codes for schema failures * controller: avoid memory leak when updating join phase * scheduler: avoid memory leak when freeing node copies * libcrmcommon: drop unhelpful trace message ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1882 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-devel-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debugsource-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-3.0.3+20260728.7052efa194-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python3-pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cts-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-schemas-3.0.3+20260728.7052efa194-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-10649.html * https://bugzilla.suse.com/show_bug.cgi?id=1180966 * https://bugzilla.suse.com/show_bug.cgi?id=1249217 * https://bugzilla.suse.com/show_bug.cgi?id=1255371 * https://bugzilla.suse.com/show_bug.cgi?id=1259345 * https://bugzilla.suse.com/show_bug.cgi?id=1265183 * https://bugzilla.suse.com/show_bug.cgi?id=1265201 * https://bugzilla.suse.com/show_bug.cgi?id=1268381 * https://bugzilla.suse.com/show_bug.cgi?id=1270354 * https://bugzilla.suse.com/show_bug.cgi?id=1271652 * https://bugzilla.suse.com/show_bug.cgi?id=1272452 * https://bugzilla.suse.com/show_bug.cgi?id=1279543 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:30:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:30:56 -0000 Subject: SUSE-SU-2026:24250-1: important: Security update for hawk2 Message-ID: <179252825602.2203.16261473157089065837@816288a415ff> # Security update for hawk2 Announcement ID: SUSE-SU-2026:24250-1 Release Date: 2026-10-09T09:55:50Z Rating: important References: * bsc#1268996 * bsc#1273348 * bsc#1274860 * bsc#1275019 * bsc#1275179 * bsc#1275183 * bsc#1275188 * bsc#1275200 * bsc#1275213 Cross-References: * CVE-2026-42246 * CVE-2026-66066 * CVE-2026-71847 * CVE-2026-73490 * CVE-2026-73491 * CVE-2026-73492 * CVE-2026-73648 CVSS scores: * CVE-2026-42246 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42246 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-66066 ( SUSE ): 9.5 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L * CVE-2026-66066 ( SUSE ): 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-66066 ( NVD ): 9.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-71847 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-71847 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71847 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73490 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73490 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73490 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73491 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73492 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73492 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73492 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities and has two fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). * CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348). * CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams (bsc#1275213). * CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179). * CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183). * CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188). * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200). Changes for hawk2: * Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019): * Test: give sle15 more time when choosing between sle15 and sle16 * Dev: bump jQuery version to 4.0.0 * Dev: bump jQuery version to 3.5.0 * Dev: bump jQuery version to 2.2.4 * Test: update the e2e test for the change allowing custom parameters * Dev: enable custom Parameters and Meta Attributes (bsc#1274860) * CI/CD: update hawk examiner entry point * Test: enable test_add_clone against hawk-apiserver verion 0.2.1 * Test: fix SyntaxWarning: invalid escape sequence '|' * Test: make the tests compatible against hawk-apiserver ver0.2.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1881 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * hawk2-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debugsource-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debuginfo-2.7.2+git.1788518533.7d4dadd6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42246.html * https://www.suse.com/security/cve/CVE-2026-66066.html * https://www.suse.com/security/cve/CVE-2026-71847.html * https://www.suse.com/security/cve/CVE-2026-73490.html * https://www.suse.com/security/cve/CVE-2026-73491.html * https://www.suse.com/security/cve/CVE-2026-73492.html * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1268996 * https://bugzilla.suse.com/show_bug.cgi?id=1273348 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 * https://bugzilla.suse.com/show_bug.cgi?id=1275019 * https://bugzilla.suse.com/show_bug.cgi?id=1275179 * https://bugzilla.suse.com/show_bug.cgi?id=1275183 * https://bugzilla.suse.com/show_bug.cgi?id=1275188 * https://bugzilla.suse.com/show_bug.cgi?id=1275200 * https://bugzilla.suse.com/show_bug.cgi?id=1275213 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:13 -0000 Subject: SUSE-SU-2026:24247-1: important: Security update for helm Message-ID: <179252827391.2203.12041979283575793401@816288a415ff> # Security update for helm Announcement ID: SUSE-SU-2026:24247-1 Release Date: 2026-10-08T06:16:18Z Rating: important References: * bsc#1281112 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-63209 * CVE-2026-81870 * CVE-2026-85732 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1870 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1870 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.2.1 * helm-fish-completion-4.3.0-160000.2.1 * helm-bash-completion-4.3.0-160000.2.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * helm-4.3.0-160000.2.1 * helm-debuginfo-4.3.0-160000.2.1 * SUSE Linux Enterprise Server 16.0 (noarch) * helm-zsh-completion-4.3.0-160000.2.1 * helm-fish-completion-4.3.0-160000.2.1 * helm-bash-completion-4.3.0-160000.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:20 -0000 Subject: SUSE-SU-2026:24246-1: moderate: Security update for python-oauthlib Message-ID: <179252828035.2203.11926531843090182152@816288a415ff> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:24246-1 Release Date: 2026-10-14T16:09:43Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1917 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1917 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-oauthlib-3.2.2-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-oauthlib-3.2.2-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:37 -0000 Subject: SUSE-SU-2026:24245-1: important: Security update for openssl-3 Message-ID: <179252829781.2203.12380463469731162678@816288a415ff> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24245-1 Release Date: 2026-10-14T15:02:40Z Rating: important References: * bsc#1280587 * bsc#1280589 * bsc#1280590 * bsc#1280591 * bsc#1280592 * bsc#1280594 * bsc#1280595 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1280599 Cross-References: * CVE-2026-35189 * CVE-2026-35191 * CVE-2026-54872 * CVE-2026-54875 * CVE-2026-72897 * CVE-2026-75804 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 * CVE-2026-84784 CVSS scores: * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35191 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35191 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54875 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54875 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72897 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72897 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72897 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-75804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75804 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75804 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-84784 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84784 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84784 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-35191: QUIC Unvalidated Amplification Credit may be Over Accounted (bsc#1280590). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-54875: Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (bsc#1280592). * CVE-2026-72897: Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake (bsc#1280594). * CVE-2026-75804: QUIC Connection-Level Flow Control is Not Enforced for Streams (bsc#1280595). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). * CVE-2026-84784: QUIC: Unbounded RETIRE_CONNECTION_ID Backlog (bsc#1280599). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1916 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1916 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libopenssl3-x86-64-v3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-3.5.0-160000.11.1 * libopenssl3-x86-64-v3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-debuginfo-3.5.0-160000.11.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * openssl-3-doc-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.5.0-160000.11.1 * openssl-3-debugsource-3.5.0-160000.11.1 * libopenssl-3-devel-3.5.0-160000.11.1 * openssl-3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-3.5.0-160000.11.1 * libopenssl-3-fips-provider-debuginfo-3.5.0-160000.11.1 * openssl-3-debuginfo-3.5.0-160000.11.1 * libopenssl3-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (noarch) * openssl-3-doc-3.5.0-160000.11.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libopenssl3-x86-64-v3-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-3.5.0-160000.11.1 * libopenssl3-x86-64-v3-debuginfo-3.5.0-160000.11.1 * libopenssl-3-fips-provider-x86-64-v3-debuginfo-3.5.0-160000.11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-35191.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-54875.html * https://www.suse.com/security/cve/CVE-2026-72897.html * https://www.suse.com/security/cve/CVE-2026-75804.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://www.suse.com/security/cve/CVE-2026-84784.html * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280590 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280592 * https://bugzilla.suse.com/show_bug.cgi?id=1280594 * https://bugzilla.suse.com/show_bug.cgi?id=1280595 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1280599 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:43 -0000 Subject: SUSE-SU-2026:24244-1: important: Security update for perl-XS-Parse-Keyword Message-ID: <179252830328.2203.4913280735935539924@816288a415ff> # Security update for perl-XS-Parse-Keyword Announcement ID: SUSE-SU-2026:24244-1 Release Date: 2026-10-14T14:20:25Z Rating: important References: * bsc#1283247 Cross-References: * CVE-2026-85644 CVSS scores: * CVE-2026-85644 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-85644 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-85644 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for perl-XS-Parse-Keyword fixes the following issue: * CVE-2026-85644: number treated as an array reference in `infix.c` (bsc#1283247). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1915 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1915 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * perl-XS-Parse-Keyword-debuginfo-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-debugsource-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-0.480.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * perl-XS-Parse-Keyword-debuginfo-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-debugsource-0.480.0-160000.3.1 * perl-XS-Parse-Keyword-0.480.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85644.html * https://bugzilla.suse.com/show_bug.cgi?id=1283247 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:24243-1: important: Security update for python-virtualenv Message-ID: <179252830976.2203.18319761148809915996@816288a415ff> # Security update for python-virtualenv Announcement ID: SUSE-SU-2026:24243-1 Release Date: 2026-10-14T13:23:18Z Rating: important References: * bsc#1283890 * bsc#1283904 Cross-References: * CVE-2026-102930 * CVE-2026-102938 CVSS scores: * CVE-2026-102930 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102930 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-102930 ( NVD ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102938 ( SUSE ): 5.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-102938 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N * CVE-2026-102938 ( NVD ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-virtualenv fixes the following issues: * CVE-2026-102930: missing hash verification for network-fetched wheels can allow wheel tampering (bsc#1283904). * CVE-2026-102938: crafted prompt values with line boundaries can cause configuration key injection (bsc#1283890). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1914 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1914 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-virtualenv-20.29.3-160000.4.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-virtualenv-20.29.3-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102930.html * https://www.suse.com/security/cve/CVE-2026-102938.html * https://bugzilla.suse.com/show_bug.cgi?id=1283890 * https://bugzilla.suse.com/show_bug.cgi?id=1283904 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:31:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:31:54 -0000 Subject: SUSE-SU-2026:24242-1: important: Security update for mutt Message-ID: <179252831493.2203.16769673278831658051@816288a415ff> # Security update for mutt Announcement ID: SUSE-SU-2026:24242-1 Release Date: 2026-10-14T12:06:08Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1913 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1913 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * mutt-debugsource-2.2.16-160000.3.1 * mutt-2.2.16-160000.3.1 * mutt-debuginfo-2.2.16-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * mutt-lang-2.2.16-160000.3.1 * mutt-doc-2.2.16-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.16-160000.3.1 * mutt-2.2.16-160000.3.1 * mutt-debuginfo-2.2.16-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * mutt-lang-2.2.16-160000.3.1 * mutt-doc-2.2.16-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:32:25 -0000 Subject: SUSE-SU-2026:24239-1: important: Security update for go1.26 Message-ID: <179252834559.2203.1136017652268819776@816288a415ff> # Security update for go1.26 Announcement ID: SUSE-SU-2026:24239-1 Release Date: 2026-10-13T15:18:05Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284771 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78667 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 13 vulnerabilities and has one fix can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.9 (bsc#1255111): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.26.9 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, vet, and the crypto/mlkem, net/http, and os packages. * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1908 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1908 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.26-race-1.26.9-160000.1.1 * go1.26-1.26.9-160000.1.1 * go1.26-doc-1.26.9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.26-race-1.26.9-160000.1.1 * go1.26-1.26.9-160000.1.1 * go1.26-doc-1.26.9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:32:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:32:53 -0000 Subject: SUSE-SU-2026:24237-1: important: Security update for go1.27 Message-ID: <179252837344.2203.10318438728797061273@816288a415ff> # Security update for go1.27 Announcement ID: SUSE-SU-2026:24237-1 Release Date: 2026-10-13T12:02:27Z Rating: important References: * bsc#1272545 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 Cross-References: * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 15 vulnerabilities and has one fix can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go1.27.2 (bsc#1272545): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). Changes: * go1.27.2 (released 2026-10-08) includes security fixes to the go command, and the crypto/tls, html/template, net/http, net/textproto, and os packages, as well as bug fixes to the compiler, the linker, the runtime, the cover tool, the go fix command, vet, and the compress/flate, crypto/mlkem, encoding/json, encoding/json/v2, net/http, and os packages. * go#81084 encoding/json: Unmarshal leaves +/-Inf in the destination on float overflow in Go 1.27 * go#81145 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81226 runtime: netpoll: eventfd ready for something unexpected * go#81229 encoding/json: json.UnsupportedValueError returns an Invalid Value instead of a Float value * go#81233 compress/flate: Writer with a preset dictionary emits the dictionary into the output stream * go#81252 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81296 cmd/compile: internal compiler error: MoveLoop too small * go#81306 cmd/compile: go1.27.0 unified export data loses method order, breaking objectpath, crashing staticcheck * go#81324 plugin: loading multiple plugins corrupts stdlib types in Go 1.27 * go#81353 runtime: Go 1.27.0: SIGSEGV crash with generic function + pointer type parameter + embedded interface * go#81362 encoding/json: Marshal now honors MarshalText for string-kind map keys * go#81374 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81389 cmd/fix, x/tools/go/analysis/passes/modernize: errorsastype rewrites errors.As target interface that does not implement error * go#81402 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81411 net/http: concurrent response body Read and Close can deadlock with automatic draining in Go 1.27 * go#81437 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81469 runtime: ios/arm64 binaries executed outside an app bundle change working directory on startup * go#81515 net/http: readLoop reads Response.ContentLength after Body.Close returns * go#81516 net/http: Response.Body.Close returns the earlier Read error after a non-EOF Read failure * go#81522 net/http: Response.Trailer race due to response body draining * go#81580 testing: go test -v doubles ESC (0x1b) in t.Log output since Go 1.27, corrupting ANSI colors in some terminals * go#81666 cmd/compile: Embedded interfaces using tail calls cause race detector stack growth * go#81667 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81706 cmd/compile: ICE on 386 when inlining nested bit rotations (Int64Lo not lowered) * go#81816 net/http: Request.TLS is not properly populated for HTTP/2 requests * go#81818 cmd/internal/obj/ppc64: async preemption bug in BR (CTR) * go#81829 runtime: windows/amd64 stack corruption when LockOSThread wraps registry calls (new in Go 1.27) * go#81832 cmd/cover: NumStmt duplicated across split blocks, inflating statement coverage * go#81861 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81890 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1906 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1906 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.27-1.27.2-160000.1.1 * go1.27-doc-1.27.2-160000.1.1 * go1.27-race-1.27.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.27-1.27.2-160000.1.1 * go1.27-doc-1.27.2-160000.1.1 * go1.27-race-1.27.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:33:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:33:04 -0000 Subject: SUSE-SU-2026:24236-1: important: Security update for agama Message-ID: <179252838494.2203.9195296332118162629@816288a415ff> # Security update for agama Announcement ID: SUSE-SU-2026:24236-1 Release Date: 2026-10-12T16:20:27Z Rating: important References: * bsc#1249014 * bsc#1271079 * bsc#1271235 * bsc#1271644 * bsc#1271854 * bsc#1274203 * jsc#PED-16702 Cross-References: * CVE-2025-58160 * CVE-2026-25541 CVSS scores: * CVE-2025-58160 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2025-58160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2025-58160 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25541 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25541 ( NVD ): 5.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25541 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities, contains one feature and has four fixes can now be installed. ## Description: This update for agama fixes the following issues: Changes in agama: * Added support for the "inst.listen_on" boot parameter * The "inst.remote=0" option disables remote access (needed for CC compliant installation jsc#PED-16702) * It is possible to specify IP address (both IPv4 and IPv6) or network interface, accepts comma separated list * agama-web-server --address2 option removed, --address can now be repeated (jsc#AGM-153) Update runtime dependencies to: * tracing-subscriber 0.3.20, CVE-2025-58160 (bsc#1249014) * bytes 1.12.1, CVE-2026-25541 (bsc#1274203) * serde_with 3.21.0, GHSA-7gcf-g7xr-8hxj (bsc#1271854) * Clear the IP configuration (dns-search, addresses, gateway, ...) for disabled IP protocols, including values kept from the existing connection, to avoid errors in NetworkManager (bsc#1271644). * Handle VLAN flags properly, using the kernel default value of VLAN_FLAG_REORDER_HDR when not specified (bsc#1271079). * Rename the network device match settings attribute to "match" (bsc#1271235). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1888 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1888 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * agama-debuginfo-17+699.92879916c-160000.13.1 * agama-cli-debuginfo-17+699.92879916c-160000.13.1 * agama-scripts-17+699.92879916c-160000.13.1 * agama-debugsource-17+699.92879916c-160000.13.1 * agama-cli-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * agama-cli-bash-completion-17+699.92879916c-160000.13.1 * agama-cli-zsh-completion-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * agama-debuginfo-17+699.92879916c-160000.13.1 * agama-cli-debuginfo-17+699.92879916c-160000.13.1 * agama-scripts-17+699.92879916c-160000.13.1 * agama-debugsource-17+699.92879916c-160000.13.1 * agama-cli-17+699.92879916c-160000.13.1 * SUSE Linux Enterprise Server 16.0 (noarch) * agama-cli-bash-completion-17+699.92879916c-160000.13.1 * agama-cli-zsh-completion-17+699.92879916c-160000.13.1 ## References: * https://www.suse.com/security/cve/CVE-2025-58160.html * https://www.suse.com/security/cve/CVE-2026-25541.html * https://bugzilla.suse.com/show_bug.cgi?id=1249014 * https://bugzilla.suse.com/show_bug.cgi?id=1271079 * https://bugzilla.suse.com/show_bug.cgi?id=1271235 * https://bugzilla.suse.com/show_bug.cgi?id=1271644 * https://bugzilla.suse.com/show_bug.cgi?id=1271854 * https://bugzilla.suse.com/show_bug.cgi?id=1274203 * https://jira.suse.com/browse/PED-16702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:41:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:41:49 -0000 Subject: SUSE-SU-2026:24235-1: important: Security update for the Linux Kernel Message-ID: <179252890952.2203.11717842507268244566@816288a415ff> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24235-1 Release Date: 2026-10-12T15:44:43Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1904 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1904 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.39.1 * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * dlm-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-obs-qa-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-syms-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * cluster-md-kmp-default-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * dlm-kmp-default-6.12.0-160000.39.1 * kernel-kvmsmall-devel-6.12.0-160000.39.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc x86_64) * kernel-azure-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * kernel-azure-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-default-vdso-6.12.0-160000.39.1 * kernel-azure-extra-debuginfo-6.12.0-160000.39.1 * kernel-default-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-debugsource-6.12.0-160000.39.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-extra-6.12.0-160000.39.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-6.12.0-160000.39.1 * kernel-azure-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.39.1 * kernel-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.39.1 * kernel-docs-html-6.12.0-160000.39.1 * kernel-source-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.39.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * kernel-64kb-extra-6.12.0-160000.39.1 * kernel-64kb-devel-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.28 * kernel-64kb-debuginfo-6.12.0-160000.39.1 * kernel-64kb-debugsource-6.12.0-160000.39.1 * kernel-64kb-extra-debuginfo-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc x86_64) * kernel-azure-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * kernel-azure-debuginfo-6.12.0-160000.39.1 * kernel-azure-extra-debuginfo-6.12.0-160000.39.1 * kernel-azure-debugsource-6.12.0-160000.39.1 * kernel-azure-extra-6.12.0-160000.39.1 * kernel-azure-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.39.1 * kernel-obs-qa-6.12.0-160000.39.1 * kernel-default-devel-6.12.0-160000.39.1 * kernel-syms-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * kernel-default-extra-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.39.1 * kernel-docs-html-6.12.0-160000.39.1 * kernel-source-6.12.0-160000.39.1 * kernel-macros-6.12.0-160000.39.1 * kernel-devel-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-6.12.0-160000.39.1 * kernel-kvmsmall-debugsource-6.12.0-160000.39.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * kernel-azure-devel-debuginfo-6.12.0-160000.39.1 * kernel-default-base-6.12.0-160000.39.1.160000.2.25 * kernel-default-vdso-6.12.0-160000.39.1 * kernel-default-vdso-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.39.1 * kernel-default-devel-debuginfo-6.12.0-160000.39.1 * kernel-azure-vdso-6.12.0-160000.39.1 * kernel-kvmsmall-vdso-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (ppc64le) * kernel-default-base-6.12.0-160000.39.1.160000.2.26 * SUSE Linux Enterprise Server 16.0 (nosrc s390x) * kernel-zfcpdump-6.12.0-160000.39.1 * SUSE Linux Enterprise Server 16.0 (s390x) * kernel-zfcpdump-debugsource-6.12.0-160000.39.1 * kernel-zfcpdump-debuginfo-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:42:02 -0000 Subject: SUSE-SU-2026:24234-1: important: Security update for iperf Message-ID: <179252892295.2203.1105812048196824624@816288a415ff> # Security update for iperf Announcement ID: SUSE-SU-2026:24234-1 Release Date: 2026-10-12T12:12:10Z Rating: important References: * bsc#1283528 * bsc#1283786 * bsc#1283787 * bsc#1284404 * bsc#1284405 Cross-References: * CVE-2026-101276 * CVE-2026-101283 * CVE-2026-102253 * CVE-2026-71217 * CVE-2026-71218 CVSS scores: * CVE-2026-101276 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101276 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101283 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-101283 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102253 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102253 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71217 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71218 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-71218 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-71218 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for iperf fixes the following issues: * CVE-2026-71217: iperf3 server accepts unbounded peer-controlled JSON parameters enabling remote denial of service via resource exhaustion (bsc#1284405). * CVE-2026-71218: unbounded peer-controlled allocation in JSON_read() allows unauthenticated remote memory exhaustion (bsc#1284404). * CVE-2026-101276: iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per- test watchdog server_timer_proc() frees streams without cancelling/joining their worker threads (bsc#1283786). * CVE-2026-101283: iperf3 3.20--3.21 (esnet/iperf) has a pre-auth heap buffer overflow in decrypt_rsa_message(): a 256-byte RSA buffer is BIO_read with the attacker-controlled ciphertext length (bsc#1283787). * CVE-2026-102253: missing checks in the server's UDP receive worker allows unauthenticated remote attackers to cause an infinite loop (bsc#1283528). Changes for iperf: * Updated to version 3.22 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1903 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1903 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libiperf0-3.21-160000.1.1 * iperf-devel-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debugsource-3.21-160000.1.1 * iperf-3.21-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libiperf0-3.21-160000.1.1 * iperf-devel-3.21-160000.1.1 * iperf-debuginfo-3.21-160000.1.1 * libiperf0-debuginfo-3.21-160000.1.1 * iperf-debugsource-3.21-160000.1.1 * iperf-3.21-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101276.html * https://www.suse.com/security/cve/CVE-2026-101283.html * https://www.suse.com/security/cve/CVE-2026-102253.html * https://www.suse.com/security/cve/CVE-2026-71217.html * https://www.suse.com/security/cve/CVE-2026-71218.html * https://bugzilla.suse.com/show_bug.cgi?id=1283528 * https://bugzilla.suse.com/show_bug.cgi?id=1283786 * https://bugzilla.suse.com/show_bug.cgi?id=1283787 * https://bugzilla.suse.com/show_bug.cgi?id=1284404 * https://bugzilla.suse.com/show_bug.cgi?id=1284405 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:42:11 -0000 Subject: SUSE-SU-2026:24233-1: important: Security update for podman Message-ID: <179252893145.2203.2618913398353909726@816288a415ff> # Security update for podman Announcement ID: SUSE-SU-2026:24233-1 Release Date: 2026-10-12T08:44:51Z Rating: important References: * bsc#1248988 * bsc#1268579 * bsc#1269471 Cross-References: * CVE-2026-55686 * CVE-2026-57231 CVSS scores: * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has one fix can now be installed. ## Description: This update for podman fixes the following issues: Security issues fixed: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). Non security issue fixed: * catatonit missing in /usr/libexec/podman/ (bsc#1248988). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1902 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1902 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * podman-remote-debuginfo-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * podman-docker-5.4.2-160000.6.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * podmansh-5.4.2-160000.6.1 * podman-5.4.2-160000.6.1 * podman-remote-5.4.2-160000.6.1 * podman-remote-debuginfo-5.4.2-160000.6.1 * podman-debuginfo-5.4.2-160000.6.1 * SUSE Linux Enterprise Server 16.0 (noarch) * podman-docker-5.4.2-160000.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://bugzilla.suse.com/show_bug.cgi?id=1248988 * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:42:18 -0000 Subject: SUSE-SU-2026:24232-1: moderate: Security update for stunnel Message-ID: <179252893835.2203.4299240602491516766@816288a415ff> # Security update for stunnel Announcement ID: SUSE-SU-2026:24232-1 Release Date: 2026-10-12T08:44:51Z Rating: moderate References: * bsc#1274206 * bsc#1274207 Cross-References: * CVE-2026-70367 * CVE-2026-70368 CVSS scores: * CVE-2026-70367 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-70367 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70367 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-70368 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-70368 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-70368 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for stunnel fixes the following issues: * CVE-2026-70367: incomplete IP address filtering in SOCKS proxy mode can allow localhost restriction bypasses (bsc#1274207). * CVE-2026-70368: oversized log messages in logging routines can cause stack out-of-bounds reads (bsc#1274206). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1901 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1901 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * stunnel-5.74-160000.3.1 * stunnel-debugsource-5.74-160000.3.1 * stunnel-debuginfo-5.74-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * stunnel-doc-5.74-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * stunnel-5.74-160000.3.1 * stunnel-debugsource-5.74-160000.3.1 * stunnel-debuginfo-5.74-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * stunnel-doc-5.74-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-70367.html * https://www.suse.com/security/cve/CVE-2026-70368.html * https://bugzilla.suse.com/show_bug.cgi?id=1274206 * https://bugzilla.suse.com/show_bug.cgi?id=1274207 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:42:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:42:44 -0000 Subject: SUSE-SU-2026:24230-1: important: Security update for xwayland Message-ID: <179252896480.2203.9809330445890656429@816288a415ff> # Security update for xwayland Announcement ID: SUSE-SU-2026:24230-1 Release Date: 2026-10-12T08:18:23Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281240 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93522 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93522 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93522 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1898 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1898 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * xwayland-devel-24.1.6-160000.7.1 * xwayland-debuginfo-24.1.6-160000.7.1 * xwayland-debugsource-24.1.6-160000.7.1 * xwayland-24.1.6-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * xwayland-devel-24.1.6-160000.7.1 * xwayland-debuginfo-24.1.6-160000.7.1 * xwayland-debugsource-24.1.6-160000.7.1 * xwayland-24.1.6-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93522.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281240 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:43:01 -0000 Subject: SUSE-SU-2026:24228-1: moderate: Security update for libpng16 Message-ID: <179252898130.2203.10053426743754747515@816288a415ff> # Security update for libpng16 Announcement ID: SUSE-SU-2026:24228-1 Release Date: 2026-10-10T11:20:30Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed CVE-2026-46675 (medium severity): Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression. (Reported independently by Ze Sheng and .) * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. (Contributed by Yuki Sekiguchi.) * Prevented a double free of `png_struct` members after an allocation failure. (Contributed by Anthony Hurtado.) * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1897 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1897 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libpng16-devel-1.6.59-160000.1.1 * libpng16-compat-devel-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 * libpng16-tools-1.6.59-160000.1.1 * libpng16-tools-debuginfo-1.6.59-160000.1.1 * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libpng16-16-x86-64-v3-1.6.59-160000.1.1 * libpng16-16-x86-64-v3-debuginfo-1.6.59-160000.1.1 * libpng16-devel-x86-64-v3-1.6.59-160000.1.1 * libpng16-compat-devel-x86-64-v3-1.6.59-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libpng16-devel-1.6.59-160000.1.1 * libpng16-compat-devel-1.6.59-160000.1.1 * libpng16-16-debuginfo-1.6.59-160000.1.1 * libpng16-tools-1.6.59-160000.1.1 * libpng16-tools-debuginfo-1.6.59-160000.1.1 * libpng16-debugsource-1.6.59-160000.1.1 * libpng16-16-1.6.59-160000.1.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * libpng16-16-x86-64-v3-1.6.59-160000.1.1 * libpng16-16-x86-64-v3-debuginfo-1.6.59-160000.1.1 * libpng16-devel-x86-64-v3-1.6.59-160000.1.1 * libpng16-compat-devel-x86-64-v3-1.6.59-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:43:08 -0000 Subject: SUSE-SU-2026:24227-1: important: Security update for gcc13 Message-ID: <179252898809.2203.17553545850254632676@816288a415ff> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24227-1 Release Date: 2026-10-09T19:05:07Z Rating: important References: * bsc#1267998 * bsc#1283123 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1896 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1896 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * gcc13-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:43:23 -0000 Subject: SUSE-SU-2026:24226-1: important: Security update for unbound Message-ID: <179252900340.2203.425202676631547220@816288a415ff> # Security update for unbound Announcement ID: SUSE-SU-2026:24226-1 Release Date: 2026-10-09T15:11:12Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1895 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1895 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * unbound-anchor-1.26.1-160000.1.1 * libunbound8-debuginfo-1.26.1-160000.1.1 * python3-unbound-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 * python3-unbound-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-devel-1.26.1-160000.1.1 * unbound-1.26.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * unbound-anchor-1.26.1-160000.1.1 * libunbound8-debuginfo-1.26.1-160000.1.1 * python3-unbound-debuginfo-1.26.1-160000.1.1 * unbound-debuginfo-1.26.1-160000.1.1 * python3-unbound-1.26.1-160000.1.1 * unbound-debugsource-1.26.1-160000.1.1 * libunbound8-1.26.1-160000.1.1 * unbound-anchor-debuginfo-1.26.1-160000.1.1 * unbound-devel-1.26.1-160000.1.1 * unbound-1.26.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:43:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:43:48 -0000 Subject: SUSE-SU-2026:24225-1: critical: Security update for webkit2gtk3 Message-ID: <179252902863.2203.17639148175946519225@816288a415ff> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:24225-1 Release Date: 2026-10-09T13:47:46Z Rating: critical References: * bsc#1275791 * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1281116 * bsc#1284619 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-28984 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43660 * CVE-2026-43670 * CVE-2026-43804 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64713 * CVE-2026-64715 * CVE-2026-64719 * CVE-2026-64728 * CVE-2026-64730 * CVE-2026-64753 * CVE-2026-64757 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64783 * CVE-2026-64784 * CVE-2026-64787 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-28984 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-28984 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-28984 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43660 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-43660 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-43660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43804 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43804 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-43804 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64713 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64713 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-64713 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64719 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64719 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64719 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-64728 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64728 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64728 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64730 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64730 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64730 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64757 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64757 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64757 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64783 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64783 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64783 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64787 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64787 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64787 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 243 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): \- CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. \- CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. \- CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. \- CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. \- CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. \- CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. \- CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. \- CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. \- CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. \- CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. \- CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. \- CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. \- CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. \- CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. \- CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. \- CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. \- CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. \- CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. \- CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. \- CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. \- CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. \- CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. \- CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. \- CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. \- CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. \- CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. \- CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. \- CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. \- CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross- origin data via a crafted HTML page. \- CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. \- CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. \- CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. \- CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. \- CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. \- CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. \- CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. \- CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. \- CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. \- CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. \- CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. \- CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. \- CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. \- CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. \- CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. \- CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. \- CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. \- CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. \- CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. \- CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. \- CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. \- CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. \- CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. \- CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. \- CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. \- CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. \- CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. WebKitGTK and WPE WebKit Security Advisory WSA-2026-0005 (bsc#1275791): \- CVE-2026-28984: A memory handling issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory handling. \- CVE-2026-43804: A vulnerability that may lead to an app denial-of-service when visiting a website was addressed through improved state management. \- CVE-2026-64713: A vulnerability that may allow websites to know if the user has visited a given link was addressed with improved checks. \- CVE-2026-64719: An out-of-bounds access issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved bounds checking. \- CVE-2026-64728: A permissions issue that may allow maliciously crafted web content to violate iframe sandboxing policy was addressed with improved validation. \- CVE-2026-64730: A vulnerability that may lead to UI spoofing when visiting a website that frames malicious content was addressed with improved UI. \- CVE-2026-64757: A memory corruption issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved state management. \- CVE-2026-64783: A use- after-free issue that may lead to an unexpected Safari crash when processing maliciously crafted web content was addressed with improved memory management. \- CVE-2026-64787: A use-after-free issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved memory management. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1889 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1889 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * webkit2gtk3-minibrowser-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-160000.1.1 * typelib-1_0-WebKit-6_0-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-4_1-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-debuginfo-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-debuginfo-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-160000.1.1 * webkit-jsc-4.1-debuginfo-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-debuginfo-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-2.54.1-160000.1.1 * typelib-1_0-WebKit2-4_1-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-6_0-2.54.1-160000.1.1 * webkit2gtk3-minibrowser-2.54.1-160000.1.1 * webkit-jsc-4.1-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-2.54.1-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * WebKitGTK-6.0-lang-2.54.1-160000.1.1 * WebKitGTK-4.1-lang-2.54.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-minibrowser-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-160000.1.1 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-160000.1.1 * typelib-1_0-WebKit-6_0-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-4_1-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-debuginfo-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-2.54.1-160000.1.1 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-debuginfo-2.54.1-160000.1.1 * libjavascriptcoregtk-4_1-0-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-160000.1.1 * webkit-jsc-4.1-debuginfo-2.54.1-160000.1.1 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-160000.1.1 * webkit-jsc-6.0-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-debuginfo-2.54.1-160000.1.1 * libwebkitgtk-6_0-4-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-160000.1.1 * webkit2gtk4-minibrowser-2.54.1-160000.1.1 * libwebkit2gtk-4_1-0-2.54.1-160000.1.1 * typelib-1_0-WebKit2-4_1-2.54.1-160000.1.1 * typelib-1_0-JavaScriptCore-6_0-2.54.1-160000.1.1 * webkit2gtk3-minibrowser-2.54.1-160000.1.1 * webkit-jsc-4.1-2.54.1-160000.1.1 * libjavascriptcoregtk-6_0-1-2.54.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * WebKitGTK-6.0-lang-2.54.1-160000.1.1 * WebKitGTK-4.1-lang-2.54.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-28984.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43660.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-43804.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64713.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64719.html * https://www.suse.com/security/cve/CVE-2026-64728.html * https://www.suse.com/security/cve/CVE-2026-64730.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64757.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64783.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-64787.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1275791 * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:00 -0000 Subject: SUSE-SU-2026:24224-1: important: Security update for squid Message-ID: <179252904011.2203.8372569308324722087@816288a415ff> # Security update for squid Announcement ID: SUSE-SU-2026:24224-1 Release Date: 2026-10-09T13:28:23Z Rating: important References: * bsc#1237027 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves five vulnerabilities and has one fix can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). Changes for squid: Update to 6.14: * Do not leak HttpReply when checking http_reply_access (bsc#1237027) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1893 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1893 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * squid-debuginfo-6.14-160000.1.1 * squid-debugsource-6.14-160000.1.1 * squid-6.14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * squid-debuginfo-6.14-160000.1.1 * squid-debugsource-6.14-160000.1.1 * squid-6.14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1237027 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:06 -0000 Subject: SUSE-SU-2026:24223-1: important: Security update for virtiofsd Message-ID: <179252904634.2203.10130363136158842720@816288a415ff> # Security update for virtiofsd Announcement ID: SUSE-SU-2026:24223-1 Release Date: 2026-10-09T12:48:27Z Rating: important References: * bsc#1257912 * bsc#1283239 Cross-References: * CVE-2026-25727 CVSS scores: * CVE-2026-25727 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-25727 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-25727 ( NVD ): 6.8 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-25727 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for virtiofsd fixes the following issue: * CVE-2026-25727: time: parsing of user-provided input by the RFC 2822 date parser can lead to stack exhaustion (bsc#1257912). Changes for virtiofsd: * Update the time crate (bsc#1257912, CVE-2026-25727) * Add command line options for UID/GID translation (bsc#1283239) * PassthroughFs: Add IdMap structures (bsc#1283239) * Add host/guest UID/GID translation code (bsc#1283239) * Custom UID/GID mapping for Attr (bsc#1283239) * Add UID/GID mapping functions to PassthroughFs (bsc#1283239) * Use explicit UID/GID types (bsc#1283239) * Introduce explicit UID/GID types (bsc#1283239) * Use SetattrIn without conversion (bsc#1283239) * Use fuse::Attr in FileSystem interfaces (bsc#1283239) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1892 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1892 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * virtiofsd-debugsource-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-1.12.0-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * virtiofsd-debugsource-1.12.0-160000.4.1 * virtiofsd-debuginfo-1.12.0-160000.4.1 * virtiofsd-1.12.0-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-25727.html * https://bugzilla.suse.com/show_bug.cgi?id=1257912 * https://bugzilla.suse.com/show_bug.cgi?id=1283239 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:11 -0000 Subject: SUSE-SU-2026:24222-1: important: Security update for google-osconfig-agent Message-ID: <179252905177.2203.6810997033738326296@816288a415ff> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24222-1 Release Date: 2026-10-09T12:48:26Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * from version 20260928.00 * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * from version 20260923.03 * Fix os/snap extractor usage (#1053) * Update to version 20260918.01 * bump grpc package to new version (#1057) * from version 20260918.00 * bump some dependencies across few modules (#1056) * Remove stale Go module version overrides in _service file ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1891 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1891 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * google-osconfig-agent-debuginfo-20260928.01-160000.1.1 * google-osconfig-agent-20260928.01-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * google-osconfig-agent-debuginfo-20260928.01-160000.1.1 * google-osconfig-agent-20260928.01-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:16 -0000 Subject: SUSE-SU-2026:24221-1: important: Security update for fetchmail Message-ID: <179252905699.2203.18351576976288781085@816288a415ff> # Security update for fetchmail Announcement ID: SUSE-SU-2026:24221-1 Release Date: 2026-10-09T12:45:38Z Rating: important References: * bsc#1282055 Cross-References: * CVE-2026-94184 CVSS scores: * CVE-2026-94184 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-94184 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-94184 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for fetchmail fixes the following issue: * CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination (bsc#1282055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1890 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1890 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * fetchmail-debuginfo-6.5.2-160000.4.1 * fetchmail-6.5.2-160000.4.1 * fetchmail-debugsource-6.5.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * fetchmail-debuginfo-6.5.2-160000.4.1 * fetchmail-6.5.2-160000.4.1 * fetchmail-debugsource-6.5.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94184.html * https://bugzilla.suse.com/show_bug.cgi?id=1282055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:32 -0000 Subject: SUSE-SU-2026:24220-1: important: Security update for openvpn Message-ID: <179252907231.2203.9455952371793115052@816288a415ff> # Security update for openvpn Announcement ID: SUSE-SU-2026:24220-1 Release Date: 2026-10-09T12:16:22Z Rating: important References: * bsc#1267944 * bsc#1267945 * bsc#1273126 * bsc#1273127 * bsc#1273128 * bsc#1273129 * bsc#1273130 * bsc#1275310 * bsc#1279613 Cross-References: * CVE-2026-11771 * CVE-2026-12932 * CVE-2026-12996 * CVE-2026-13117 * CVE-2026-13379 * CVE-2026-35058 * CVE-2026-40215 * CVE-2026-63650 * CVE-2026-84732 CVSS scores: * CVE-2026-11771 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-11771 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-11771 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-11771 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-12932 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-12932 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-12932 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-12932 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-12996 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-12996 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-12996 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-12996 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-13117 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-13117 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-13117 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13117 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-13379 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:N/SA:H * CVE-2026-13379 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:H * CVE-2026-13379 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:L/VI:N/VA:L/SC:H/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-13379 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-35058 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-35058 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35058 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35058 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-40215 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-40215 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-40215 ( NVD ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:L/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-40215 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-63650 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-63650 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-63650 ( NVD ): 2.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-84732 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84732 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for openvpn fixes the following issues: * CVE-2026-11771: NTLM proxy auth stack off-by-one write (bsc#1273126). * CVE-2026-12932: memory leak using --tls-crypt-v2 (bsc#1273127). * CVE-2026-12996: Potential DoS and memory leak via TLS session use-after-free (bsc#1273128). * CVE-2026-13117: Heap use-after-free via incomplete guard in check_session_buf_not_used() (bsc#1273129). * CVE-2026-13379: Windows interactive service DNS SearchList state pollution (bsc#1273130). * CVE-2026-35058: improper validation of packet length can lead to a denial of service (bsc#1267945). * CVE-2026-40215: race condition during TLS session promotion can lead to a use-after-free (bsc#1267944). * CVE-2026-63650: OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field (bsc#1275310). * CVE-2026-84732: Remote Denial of Service via crafted ACK packets (bsc#1279613). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1885 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1885 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * openvpn-auth-pam-plugin-2.6.10-160000.5.1 * openvpn-devel-2.6.10-160000.5.1 * openvpn-debuginfo-2.6.10-160000.5.1 * openvpn-2.6.10-160000.5.1 * openvpn-down-root-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-auth-pam-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-down-root-plugin-2.6.10-160000.5.1 * openvpn-debugsource-2.6.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * openvpn-auth-pam-plugin-2.6.10-160000.5.1 * openvpn-devel-2.6.10-160000.5.1 * openvpn-debuginfo-2.6.10-160000.5.1 * openvpn-2.6.10-160000.5.1 * openvpn-down-root-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-auth-pam-plugin-debuginfo-2.6.10-160000.5.1 * openvpn-down-root-plugin-2.6.10-160000.5.1 * openvpn-debugsource-2.6.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11771.html * https://www.suse.com/security/cve/CVE-2026-12932.html * https://www.suse.com/security/cve/CVE-2026-12996.html * https://www.suse.com/security/cve/CVE-2026-13117.html * https://www.suse.com/security/cve/CVE-2026-13379.html * https://www.suse.com/security/cve/CVE-2026-35058.html * https://www.suse.com/security/cve/CVE-2026-40215.html * https://www.suse.com/security/cve/CVE-2026-63650.html * https://www.suse.com/security/cve/CVE-2026-84732.html * https://bugzilla.suse.com/show_bug.cgi?id=1267944 * https://bugzilla.suse.com/show_bug.cgi?id=1267945 * https://bugzilla.suse.com/show_bug.cgi?id=1273126 * https://bugzilla.suse.com/show_bug.cgi?id=1273127 * https://bugzilla.suse.com/show_bug.cgi?id=1273128 * https://bugzilla.suse.com/show_bug.cgi?id=1273129 * https://bugzilla.suse.com/show_bug.cgi?id=1273130 * https://bugzilla.suse.com/show_bug.cgi?id=1275310 * https://bugzilla.suse.com/show_bug.cgi?id=1279613 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:47 -0000 Subject: SUSE-SU-2026:24219-1: important: Security update for python-PyJWT Message-ID: <179252908793.2203.4638499221450440713@816288a415ff> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24219-1 Release Date: 2026-10-09T12:12:48Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1887 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1887 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-PyJWT-2.12.1-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-PyJWT-2.12.1-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:44:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:44:53 -0000 Subject: SUSE-SU-2026:24218-1: moderate: Security update for python-jwcrypto Message-ID: <179252909337.2203.9209588637175453491@816288a415ff> # Security update for python-jwcrypto Announcement ID: SUSE-SU-2026:24218-1 Release Date: 2026-10-09T12:12:47Z Rating: moderate References: * bsc#1280816 Cross-References: * CVE-2026-92091 CVSS scores: * CVE-2026-92091 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-92091 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92091 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-jwcrypto fixes the following issue: * CVE-2026-92091: `JWK.import_key()` validates the `key_ops` JWK member for duplicate values using a quadratic complexity algorithm, which allows attackers to cause a denial of service via excessive resource consumption (bsc#1280816). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1886 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1886 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-jwcrypto-1.5.6-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-jwcrypto-1.5.6-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-92091.html * https://bugzilla.suse.com/show_bug.cgi?id=1280816 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:01 -0000 Subject: SUSE-SU-2026:24217-1: important: Security update for python-urllib3 Message-ID: <179252910154.2203.774911841996276024@816288a415ff> # Security update for python-urllib3 Announcement ID: SUSE-SU-2026:24217-1 Release Date: 2026-10-09T11:46:57Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1884 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1884 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-urllib3-2.5.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-urllib3-2.5.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:06 -0000 Subject: SUSE-SU-2026:24216-1: moderate: Security update for python-hpack Message-ID: <179252910693.2203.6724009391415817350@816288a415ff> # Security update for python-hpack Announcement ID: SUSE-SU-2026:24216-1 Release Date: 2026-10-09T11:45:01Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1883 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1883 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-hpack-4.1.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-hpack-4.1.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:19 -0000 Subject: SUSE-SU-2026:24215-1: important: Security update for busybox Message-ID: <179252911984.2203.6970712764950109549@816288a415ff> # Security update for busybox Announcement ID: SUSE-SU-2026:24215-1 Release Date: 2026-10-09T06:39:54Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1880 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1880 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * busybox-static-1.37.0-160000.8.1 * busybox-debugsource-1.37.0-160000.8.1 * busybox-1.37.0-160000.8.1 * busybox-debuginfo-1.37.0-160000.8.1 * busybox-static-debuginfo-1.37.0-160000.8.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.8.1 * busybox-warewulf3-1.37.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * busybox-static-1.37.0-160000.8.1 * busybox-debugsource-1.37.0-160000.8.1 * busybox-1.37.0-160000.8.1 * busybox-debuginfo-1.37.0-160000.8.1 * busybox-static-debuginfo-1.37.0-160000.8.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * busybox-warewulf3-debuginfo-1.37.0-160000.8.1 * busybox-warewulf3-1.37.0-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:25 -0000 Subject: SUSE-SU-2026:24214-1: important: Security update for ghostscript Message-ID: <179252912515.2203.14143806285719417525@816288a415ff> # Security update for ghostscript Announcement ID: SUSE-SU-2026:24214-1 Release Date: 2026-10-09T06:34:50Z Rating: important References: * bsc#1280620 Cross-References: * CVE-2026-39919 CVSS scores: * CVE-2026-39919 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-39919 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-39919 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-39919 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for ghostscript fixes the following issue: * CVE-2026-39919: heap-based buffer overflow in the JPEG 2000 output adapter allows attackers to cause memory corruption by supplying crafted PDFs (bsc#1280620). Changes for ghostscript: * Version upgrade to 10.08.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1876 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1876 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * ghostscript-x11-10.08.0-160000.1.1 * ghostscript-10.08.0-160000.1.1 * ghostscript-debugsource-10.08.0-160000.1.1 * ghostscript-x11-debuginfo-10.08.0-160000.1.1 * ghostscript-devel-10.08.0-160000.1.1 * ghostscript-debuginfo-10.08.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * ghostscript-x11-10.08.0-160000.1.1 * ghostscript-10.08.0-160000.1.1 * ghostscript-debugsource-10.08.0-160000.1.1 * ghostscript-x11-debuginfo-10.08.0-160000.1.1 * ghostscript-devel-10.08.0-160000.1.1 * ghostscript-debuginfo-10.08.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39919.html * https://bugzilla.suse.com/show_bug.cgi?id=1280620 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:35 -0000 Subject: SUSE-SU-2026:24213-1: important: Security update for cosign Message-ID: <179252913553.2203.15705309917371761796@816288a415ff> # Security update for cosign Announcement ID: SUSE-SU-2026:24213-1 Release Date: 2026-10-09T06:33:57Z Rating: important References: * bsc#1272117 * bsc#1275025 * bsc#1278614 * bsc#1279215 * bsc#1282542 Cross-References: * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-78662 * CVE-2026-84304 CVSS scores: * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-84304 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84304 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84304 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for cosign fixes the following issues: * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272117). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1278614). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-84304: google.golang.org/grpc: heap memory exhaustion via HTTP/2 DATA frame fragmentation (bsc#1279215). * Verification bypass via public key in legacy bundle (bsc#1282542). Changes for cosign: * update to 3.1.3 (bsc#1282542, GHSA-fx35-mq7g-6g98): * This release resolves GHSA-fx35-mq7g-6g98, a verification bypass using an unexpected public key in a legacy bundle. * Auto-detect default digest algorithm for public keys * fix(pkcs11key): return an error instead of panicking when no key pair matches * Supporting OCI Signing with X.509 Certificate Chain * test(inspect): replace mock TSA client usage with local timestamp response generator in * fix: prevent shell completions for various options not taking filenames * fix(blob): compare file checksums case-insensitively in * Verification bypass via public key in legacy bundle (GHSA- fx35-mq7g-6g98) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1877 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1877 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cosign-debuginfo-3.1.3-160000.1.1 * cosign-3.1.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-160000.1.1 * cosign-3.1.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-84304.html * https://bugzilla.suse.com/show_bug.cgi?id=1272117 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1278614 * https://bugzilla.suse.com/show_bug.cgi?id=1279215 * https://bugzilla.suse.com/show_bug.cgi?id=1282542 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:44 -0000 Subject: SUSE-SU-2026:24211-1: important: Security update for pgvector Message-ID: <179252914450.2203.5571046513248981978@816288a415ff> # Security update for pgvector Announcement ID: SUSE-SU-2026:24211-1 Release Date: 2026-10-09T06:31:53Z Rating: important References: * bsc#1284129 Cross-References: * CVE-2026-103484 CVSS scores: * CVE-2026-103484 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-103484 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103484 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for pgvector fixes the following issue: * CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: * Updated to version 0.8.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1878 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1878 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * postgresql18-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql17-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-0.8.7-160000.1.1 * postgresql18-pgvector-0.8.7-160000.1.1 * postgresql14-pgvector-0.8.7-160000.1.1 * postgresql16-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql16-pgvector-debugsource-0.8.7-160000.1.1 * postgresql16-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-0.8.7-160000.1.1 * postgresql13-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-debugsource-0.8.7-160000.1.1 * postgresql13-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql13-pgvector-debugsource-0.8.7-160000.1.1 * postgresql18-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debugsource-0.8.7-160000.1.1 * pgvector-devel-0.8.7-160000.1.1 * postgresql15-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debuginfo-0.8.7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * postgresql18-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql17-pgvector-debugsource-0.8.7-160000.1.1 * postgresql17-pgvector-0.8.7-160000.1.1 * postgresql18-pgvector-0.8.7-160000.1.1 * postgresql14-pgvector-0.8.7-160000.1.1 * postgresql16-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql16-pgvector-debugsource-0.8.7-160000.1.1 * postgresql16-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-0.8.7-160000.1.1 * postgresql13-pgvector-0.8.7-160000.1.1 * postgresql15-pgvector-debugsource-0.8.7-160000.1.1 * postgresql13-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql13-pgvector-debugsource-0.8.7-160000.1.1 * postgresql18-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debugsource-0.8.7-160000.1.1 * pgvector-devel-0.8.7-160000.1.1 * postgresql15-pgvector-debuginfo-0.8.7-160000.1.1 * postgresql14-pgvector-debuginfo-0.8.7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103484.html * https://bugzilla.suse.com/show_bug.cgi?id=1284129 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:45:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:45:58 -0000 Subject: SUSE-SU-2026:24208-1: important: Security update for python-anyio Message-ID: <179252915850.2203.5715501780310153200@816288a415ff> # Security update for python-anyio Announcement ID: SUSE-SU-2026:24208-1 Release Date: 2026-10-08T10:43:41Z Rating: important References: * bsc#1281475 * bsc#1281476 Cross-References: * CVE-2026-63374 * CVE-2026-64847 CVSS scores: * CVE-2026-63374 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-63374 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63374 ( NVD ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-64847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64847 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-anyio fixes the following issues: * CVE-2026-63374: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing (bsc#1281476). * CVE-2026-64847: AnyIO process-pool workers can block indefinitely on undrained stderr (bsc#1281475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1873 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1873 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-anyio-4.8.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-anyio-4.8.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63374.html * https://www.suse.com/security/cve/CVE-2026-64847.html * https://bugzilla.suse.com/show_bug.cgi?id=1281475 * https://bugzilla.suse.com/show_bug.cgi?id=1281476 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:46:07 -0000 Subject: SUSE-SU-2026:24207-1: important: Security update for python-tornado6 Message-ID: <179252916713.2203.16697124240163618582@816288a415ff> # Security update for python-tornado6 Announcement ID: SUSE-SU-2026:24207-1 Release Date: 2026-10-08T10:42:17Z Rating: important References: * bsc#1261922 * bsc#1277725 * bsc#1281439 * bsc#1281440 Cross-References: * CVE-2026-82397 * CVE-2026-91990 * CVE-2026-91991 CVSS scores: * CVE-2026-82397 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82397 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91991 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N * CVE-2026-91991 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-91991 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities and has one fix can now be installed. ## Description: This update for python-tornado6 fixes the following issues: * CVE-2026-82397: an unauthenticated request body containing millions of separator-delimited fields can synchronously stall the single-threaded event loop and delay every connection (bsc#1277725). * CVE-2026-91990: splitting of multipart data before validation of the `max_parts` limit allows for resource exhaustion and a denial of service (bsc#1281439). * CVE-2026-91991: incomplete fix for cookie attribute injection allows for cookie validation bypass via semicolon- delimited data in capitalized parameters (bsc#1281440). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1872 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1872 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * python313-tornado6-debuginfo-6.5-160000.7.1 * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * python313-tornado6-debuginfo-6.5-160000.7.1 * python313-tornado6-6.5-160000.7.1 * python-tornado6-debugsource-6.5-160000.7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82397.html * https://www.suse.com/security/cve/CVE-2026-91990.html * https://www.suse.com/security/cve/CVE-2026-91991.html * https://bugzilla.suse.com/show_bug.cgi?id=1261922 * https://bugzilla.suse.com/show_bug.cgi?id=1277725 * https://bugzilla.suse.com/show_bug.cgi?id=1281439 * https://bugzilla.suse.com/show_bug.cgi?id=1281440 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:46:33 -0000 Subject: SUSE-SU-2026:24205-1: moderate: Security update for libheif Message-ID: <179252919340.2203.15371757748294958922@816288a415ff> # Security update for libheif Announcement ID: SUSE-SU-2026:24205-1 Release Date: 2026-10-08T06:18:28Z Rating: moderate References: * bsc#1281829 * bsc#1281948 * bsc#1281949 * bsc#1281950 * bsc#1281951 * bsc#1281952 * bsc#1281953 * bsc#1281954 Cross-References: * CVE-2020-6851 * CVE-2026-84449 CVSS scores: * CVE-2020-6851 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2020-6851 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84449 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84449 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84449 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities and has six fixes can now be installed. ## Description: This update for libheif fixes the following issues: * CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). * AV1/libaom path allows allocation before libheif rejects mismatched coded dimensions (bsc#1281953). * Caller-configured security limits not enforced for MINI-box parsing (bsc#1281952). * Heap out-of-bounds read in libheif alpha compositing via mismatched per- channel bit depths (bsc#1281951). * Heap-use-after-free and double free in ImageItem::encode_to_bitstream_and_boxes (bsc#1281949). * Incomplete OpenJPEG pre-decode security limits allow unsafe decode through the public API (bsc#1281954). * JPEG 2000 pclr zero-column allocation amplification bypasses max_total_memory (bsc#1281950). * Out-of-bounds heap read in unc_encoder_rgb_pixel_interleave (bsc#1281948). Changes for libheif: * update to 1.23.5: * (GHSA-v8qw-hwjv-44hw) Memory exhaustion through a mismatch between the container and the bitstream image size. A crafted image can declare a small size in its ispe property while the bitstream declares a much larger coded frame. The container-level checks used the ispe size, so the oversized bitstream reached the decoder, which allocated a frame buffer for the in- band size before libheif rejected the mismatch. The advisory demonstrated this for AV1 with the libaom backend (a 351-byte AVIF declaring 64x64 but coding up to 27648x27648, allocating hundreds of MB to more than 10 GB), but the same class affects every codec whose real frame size lives in the bitstream. The coded size is now checked against max_image_size_pixels in the codec- independent decode path, before any bytes reach a decoder plugin: all AV1 sequence headers, all HEVC/AVC/VVC SPS NAL units (including those carried in the item data, not only the ones in the configuration record), the JPEG SOF marker and the JPEG 2000 SIZ reference grid are scanned for the largest coded size. (high) * (GHSA-qwpf-5wf7-r996) Heap use-after-free and double free when encoding an image that carries a TAI timestamp, including transcoding a file with an itai property. ImageDescription shallow-copied its raw heif_tai_timestamp_packet pointer, and a temporary in ImageItem::encode_to_bitstream_and_boxes() freed the packet while the item and the source image still held it. The timestamp is now stored by value. (medium) * (GHSA-9c75-9g8r-4728) Memory amplification through a JPEG 2000 pclr box declaring zero palette columns. The entry-count bound was skipped for zero columns, so an 11-byte box allocated 65,535 empty palette entries, and nested j2kH containers could repeat this within the child and nesting limits: a 3 KB file reached about 330 MB RSS, none of it charged to max_total_memory. Zero columns are rejected (ISO/IEC 15444-1 requires 1 to 255), the byte bound is unconditional, and the palette storage is charged to the memory limits. (medium) * (GHSA-r7gr-2xm2-23wf) Heap out-of-bounds read in alpha compositing for uncompressed (unci) images whose colour planes have different bit depths. Op_flatten_alpha_plane read every plane through the sample type of the first colour plane, so an 8-bit blue plane next to 16-bit red and green planes was read with a halved stride past its end, and the bytes ended up in the composited output. ColorState now tracks one bit depth per plane, and the operator declines mixed sample widths at planning time. (medium) * (GHSA-q492-cfcm-895h) The OpenJPEG decoder plugin's pre-decode size check bounded the JPEG 2000 window span (x1-x0)*(y1-y0) but not the absolute reference-grid coordinates, so a codestream with a 17-pixel window on a grid near the 32-bit boundary reached opj_decode(). Against OpenJPEG 2.3.1 this produced a heap-buffer-overflow write inside OpenJPEG (the class of CVE-2020-6851); OpenJPEG 2.5.4 rejects the input. The reference-grid area is now bounded as well. (low) * (GHSA-qfj5-c4pq-q998) Heap out-of-bounds read in the uncompressed encoder when an application attached a separate alpha plane to an image with an interleaved chroma format. The interleaved encoders took their component list from the chroma format (three entries) but decided whether to write alpha from the presence of an alpha plane, and indexed the list at [3]. heif_image_add_plane() now rejects a separate alpha plane on interleaved images, and the encoders derive both decisions from the chroma format. Only reachable through the public API; decoding never produces such an image. (low) * (GHSA-7pwf-qh74-p35w) The caller's heif_security_limits were not applied when parsing a mini box (the MIAF minimized image format) or the av1C/hvcC blob embedded in it; the built-in defaults were used instead. An application that tightened the limits got no enforcement of its max_memory_block_size or max_total_memory on such files. The allocations are bounded by the bytes present in the box, so this could not amplify memory use. (low) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1865 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1865 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libheif-debugsource-1.23.5-160000.1.1 * libheif-aom-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-1.23.5-160000.1.1 * libheif1-1.23.5-160000.1.1 * libheif-aom-1.23.5-160000.1.1 * libheif-ffmpeg-debuginfo-1.23.5-160000.1.1 * libheif-ffmpeg-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-1.23.5-160000.1.1 * libheif-dav1d-debuginfo-1.23.5-160000.1.1 * libheif1-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-debuginfo-1.23.5-160000.1.1 * libheif-dav1d-1.23.5-160000.1.1 * libheif-jpeg-1.23.5-160000.1.1 * libheif-rav1e-debuginfo-1.23.5-160000.1.1 * libheif-jpeg-debuginfo-1.23.5-160000.1.1 * libheif-rav1e-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * libheif-svtenc-1.23.5-160000.1.1 * libheif-svtenc-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libheif-debugsource-1.23.5-160000.1.1 * libheif-aom-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-1.23.5-160000.1.1 * libheif1-1.23.5-160000.1.1 * libheif-aom-1.23.5-160000.1.1 * libheif-ffmpeg-debuginfo-1.23.5-160000.1.1 * libheif-ffmpeg-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-1.23.5-160000.1.1 * libheif-dav1d-debuginfo-1.23.5-160000.1.1 * libheif1-debuginfo-1.23.5-160000.1.1 * libheif-openjpeg-debuginfo-1.23.5-160000.1.1 * libheif-dav1d-1.23.5-160000.1.1 * libheif-jpeg-1.23.5-160000.1.1 * libheif-rav1e-debuginfo-1.23.5-160000.1.1 * libheif-jpeg-debuginfo-1.23.5-160000.1.1 * libheif-rav1e-1.23.5-160000.1.1 * gdk-pixbuf-loader-libheif-debuginfo-1.23.5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * libheif-svtenc-1.23.5-160000.1.1 * libheif-svtenc-debuginfo-1.23.5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2020-6851.html * https://www.suse.com/security/cve/CVE-2026-84449.html * https://bugzilla.suse.com/show_bug.cgi?id=1281829 * https://bugzilla.suse.com/show_bug.cgi?id=1281948 * https://bugzilla.suse.com/show_bug.cgi?id=1281949 * https://bugzilla.suse.com/show_bug.cgi?id=1281950 * https://bugzilla.suse.com/show_bug.cgi?id=1281951 * https://bugzilla.suse.com/show_bug.cgi?id=1281952 * https://bugzilla.suse.com/show_bug.cgi?id=1281953 * https://bugzilla.suse.com/show_bug.cgi?id=1281954 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:46:38 -0000 Subject: SUSE-SU-2026:24204-1: moderate: Security update for libXpm Message-ID: <179252919862.2203.13281111553942300985@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:24204-1 Release Date: 2026-10-08T06:15:26Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1869 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1869 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXpm-tools-debuginfo-3.5.17-160000.4.1 * libXpm4-3.5.17-160000.4.1 * libXpm4-debuginfo-3.5.17-160000.4.1 * libXpm-debugsource-3.5.17-160000.4.1 * libXpm-devel-3.5.17-160000.4.1 * libXpm-tools-3.5.17-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXpm-tools-debuginfo-3.5.17-160000.4.1 * libXpm4-3.5.17-160000.4.1 * libXpm4-debuginfo-3.5.17-160000.4.1 * libXpm-debugsource-3.5.17-160000.4.1 * libXpm-devel-3.5.17-160000.4.1 * libXpm-tools-3.5.17-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:46:50 -0000 Subject: SUSE-SU-2026:24203-1: moderate: Security update for libXi Message-ID: <179252921067.2203.15011979504362812925@816288a415ff> # Security update for libXi Announcement ID: SUSE-SU-2026:24203-1 Release Date: 2026-10-08T06:15:26Z Rating: moderate References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 Cross-References: * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: out-of-bounds read in XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: out-of-bounds read in XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: out-of-bounds read in XI2 class parser (bsc#1281608). * CVE-2026-93544: out-of-bounds read in XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: out-of-bounds read in ListInputDevices() (bsc#1281612). * CVE-2026-94281: out-of-bounds read in XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: out-of-bounds read in XI2 enter/leave/focus cookie conversio (bsc#1281651). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1867 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1867 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 * libXi-devel-1.8.2-160000.4.1 * libXi-debugsource-1.8.2-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libXi6-debuginfo-1.8.2-160000.4.1 * libXi6-1.8.2-160000.4.1 * libXi-devel-1.8.2-160000.4.1 * libXi-debugsource-1.8.2-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:46:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:46:56 -0000 Subject: SUSE-SU-2026:24202-1: important: Security update for librsvg Message-ID: <179252921603.2203.12467602305515850390@816288a415ff> # Security update for librsvg Announcement ID: SUSE-SU-2026:24202-1 Release Date: 2026-10-08T06:15:26Z Rating: important References: * bsc#1282612 Cross-References: * CVE-2026-96889 CVSS scores: * CVE-2026-96889 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96889 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96889 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for librsvg fixes the following issues: * CVE-2026-96889: use-after-free when XML includes have duplicated entities (bsc#1282612). Changes for librsvg: * Update to version 2.60.3: * Dependency updates: lopdf for RUSTSEC-2026-0187, crossbeam-epoch for RUSTSEC-2026-0204, time for RUSTSEC-2026-0009. * The minimum supported Rust version (MSRV) is 1.89.0. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1864 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1864 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * rsvg-convert-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * typelib-1_0-Rsvg-2_0-2.60.3-160000.1.1 * librsvg-devel-2.60.3-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * rsvg-thumbnailer-2.60.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * rsvg-convert-2.60.3-160000.1.1 * librsvg-2-2-debuginfo-2.60.3-160000.1.1 * librsvg-2-2-2.60.3-160000.1.1 * gdk-pixbuf-loader-rsvg-2.60.3-160000.1.1 * typelib-1_0-Rsvg-2_0-2.60.3-160000.1.1 * librsvg-devel-2.60.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * rsvg-thumbnailer-2.60.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-96889.html * https://bugzilla.suse.com/show_bug.cgi?id=1282612 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:47:04 -0000 Subject: SUSE-SU-2026:24201-1: moderate: Security update for libX11 Message-ID: <179252922400.2203.8427318424864257596@816288a415ff> # Security update for libX11 Announcement ID: SUSE-SU-2026:24201-1 Release Date: 2026-10-08T06:14:16Z Rating: moderate References: * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-94283: out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1868 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1868 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-devel-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * libX11-data-1.8.10-160000.5.1 * libX11-devel-doc-1.8.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libX11-debugsource-1.8.10-160000.5.1 * libX11-6-1.8.10-160000.5.1 * libX11-devel-1.8.10-160000.5.1 * libX11-6-debuginfo-1.8.10-160000.5.1 * libX11-xcb1-1.8.10-160000.5.1 * libX11-xcb1-debuginfo-1.8.10-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * libX11-data-1.8.10-160000.5.1 * libX11-devel-doc-1.8.10-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:47:17 -0000 Subject: SUSE-SU-2026:24200-1: moderate: Security update for ntfs-3g_ntfsprogs Message-ID: <179252923754.2203.3673911755819289793@816288a415ff> # Security update for ntfs-3g_ntfsprogs Announcement ID: SUSE-SU-2026:24200-1 Release Date: 2026-10-08T06:13:17Z Rating: moderate References: * bsc#1281756 * bsc#1281757 * bsc#1281758 * bsc#1281759 * bsc#1281760 * bsc#1281761 * bsc#1281762 * bsc#1281763 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has eight fixes can now be installed. ## Description: This update for ntfs-3g_ntfsprogs fixes the following issues: * Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). * Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). * Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). * Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). * Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). * Heap buffer overflow in ntfs_same_sid() (bsc#1281757). * Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). * Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1866 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1866 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * libntfs-3g89-2022.10.3-160000.5.1 * ntfsprogs-2022.10.3-160000.5.1 * ntfsprogs-extra-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-debuginfo-2022.10.3-160000.5.1 * ntfsprogs-debuginfo-2022.10.3-160000.5.1 * libntfs-3g89-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-2022.10.3-160000.5.1 * libntfs-3g-devel-2022.10.3-160000.5.1 * ntfsprogs-extra-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debuginfo-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debugsource-2022.10.3-160000.5.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * libntfs-3g89-2022.10.3-160000.5.1 * ntfsprogs-2022.10.3-160000.5.1 * ntfsprogs-extra-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-debuginfo-2022.10.3-160000.5.1 * ntfsprogs-debuginfo-2022.10.3-160000.5.1 * libntfs-3g89-debuginfo-2022.10.3-160000.5.1 * ntfs-3g-2022.10.3-160000.5.1 * libntfs-3g-devel-2022.10.3-160000.5.1 * ntfsprogs-extra-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debuginfo-2022.10.3-160000.5.1 * ntfs-3g_ntfsprogs-debugsource-2022.10.3-160000.5.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281756 * https://bugzilla.suse.com/show_bug.cgi?id=1281757 * https://bugzilla.suse.com/show_bug.cgi?id=1281758 * https://bugzilla.suse.com/show_bug.cgi?id=1281759 * https://bugzilla.suse.com/show_bug.cgi?id=1281760 * https://bugzilla.suse.com/show_bug.cgi?id=1281761 * https://bugzilla.suse.com/show_bug.cgi?id=1281762 * https://bugzilla.suse.com/show_bug.cgi?id=1281763 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:47:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:47:35 -0000 Subject: SUSE-SU-2026:24199-1: important: Security update for strongswan Message-ID: <179252925513.2203.869898699453610447@816288a415ff> # Security update for strongswan Announcement ID: SUSE-SU-2026:24199-1 Release Date: 2026-10-08T06:13:17Z Rating: important References: * bsc#1276533 * bsc#1276534 * bsc#1276536 * bsc#1276539 * bsc#1276540 * bsc#1276541 * bsc#1276543 * bsc#1276544 * bsc#1276545 * bsc#1276548 * bsc#1276549 Cross-References: * CVE-2026-78123 * CVE-2026-78124 * CVE-2026-78126 * CVE-2026-78127 * CVE-2026-78129 * CVE-2026-78130 * CVE-2026-78131 * CVE-2026-78132 * CVE-2026-78133 * CVE-2026-78134 * CVE-2026-78135 CVSS scores: * CVE-2026-78123 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78123 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78123 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78124 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78124 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78124 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-78126 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78126 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78126 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78127 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78127 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78127 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78129 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78129 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-78129 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78130 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78130 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78130 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78131 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78131 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78131 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78132 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78132 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78132 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78133 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78133 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78133 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78134 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-78134 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-78134 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-78135 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-78135 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-78135 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-78135 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 11 vulnerabilities can now be installed. ## Description: This update for strongswan fixes the following issues: * CVE-2026-78123: Undefined Memory Access When Handling PKCS#7 Containers (bsc#1276533). * CVE-2026-78124: Memory Leak When Processing Certificates in PKCS#7 Containers (bsc#1276534). * CVE-2026-78126: NULL-Pointer Dereference When Handling AKA-Synchronization- Failure (bsc#1276536). * CVE-2026-78127: Memory Leak During Message Stringification (bsc#1276539). * CVE-2026-78129: Unbounded Iteration When Decrypting PKCS#7 Containers (bsc#1276540). * CVE-2026-78130: NULL-Pointer Dereference in Attribute Certificate Validation (bsc#1276541). * CVE-2026-78131: Memory Leaks When Parsing Attribute Certificates (bsc#1276543). * CVE-2026-78132: Infinite Loop When Parsing Attribute Certificates (bsc#1276544). * CVE-2026-78133: Use-After-Free During Multi-KE Rekey Collision (bsc#1276545). * CVE-2026-78134: Missing Inner EAP Method Authentication Details (bsc#1276548). * CVE-2026-78135: Creation of a Child SA Pre-Authentication (bsc#1276549). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1863 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1863 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * strongswan-mysql-debuginfo-6.0.6-160000.3.1 * strongswan-ipsec-6.0.6-160000.3.1 * strongswan-debuginfo-6.0.6-160000.3.1 * strongswan-nm-6.0.6-160000.3.1 * strongswan-ipsec-debuginfo-6.0.6-160000.3.1 * strongswan-debugsource-6.0.6-160000.3.1 * strongswan-mysql-6.0.6-160000.3.1 * strongswan-nm-debuginfo-6.0.6-160000.3.1 * strongswan-sqlite-debuginfo-6.0.6-160000.3.1 * strongswan-fips-6.0.6-160000.3.1 * strongswan-sqlite-6.0.6-160000.3.1 * strongswan-6.0.6-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * strongswan-doc-6.0.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * strongswan-mysql-debuginfo-6.0.6-160000.3.1 * strongswan-ipsec-6.0.6-160000.3.1 * strongswan-debuginfo-6.0.6-160000.3.1 * strongswan-nm-6.0.6-160000.3.1 * strongswan-ipsec-debuginfo-6.0.6-160000.3.1 * strongswan-debugsource-6.0.6-160000.3.1 * strongswan-mysql-6.0.6-160000.3.1 * strongswan-nm-debuginfo-6.0.6-160000.3.1 * strongswan-sqlite-debuginfo-6.0.6-160000.3.1 * strongswan-fips-6.0.6-160000.3.1 * strongswan-sqlite-6.0.6-160000.3.1 * strongswan-6.0.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * strongswan-doc-6.0.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78123.html * https://www.suse.com/security/cve/CVE-2026-78124.html * https://www.suse.com/security/cve/CVE-2026-78126.html * https://www.suse.com/security/cve/CVE-2026-78127.html * https://www.suse.com/security/cve/CVE-2026-78129.html * https://www.suse.com/security/cve/CVE-2026-78130.html * https://www.suse.com/security/cve/CVE-2026-78131.html * https://www.suse.com/security/cve/CVE-2026-78132.html * https://www.suse.com/security/cve/CVE-2026-78133.html * https://www.suse.com/security/cve/CVE-2026-78134.html * https://www.suse.com/security/cve/CVE-2026-78135.html * https://bugzilla.suse.com/show_bug.cgi?id=1276533 * https://bugzilla.suse.com/show_bug.cgi?id=1276534 * https://bugzilla.suse.com/show_bug.cgi?id=1276536 * https://bugzilla.suse.com/show_bug.cgi?id=1276539 * https://bugzilla.suse.com/show_bug.cgi?id=1276540 * https://bugzilla.suse.com/show_bug.cgi?id=1276541 * https://bugzilla.suse.com/show_bug.cgi?id=1276543 * https://bugzilla.suse.com/show_bug.cgi?id=1276544 * https://bugzilla.suse.com/show_bug.cgi?id=1276545 * https://bugzilla.suse.com/show_bug.cgi?id=1276548 * https://bugzilla.suse.com/show_bug.cgi?id=1276549 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:56:21 -0000 Subject: SUSE-SU-2026:24197-1: important: Security update for the Linux Kernel Message-ID: <179252978172.2203.8151923109887867769@816288a415ff> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24197-1 Release Date: 2026-10-12T14:15:17Z Rating: important References: * bsc#1253340 * bsc#1258335 * bsc#1260474 * bsc#1261564 * bsc#1261816 * bsc#1264330 * bsc#1264607 * bsc#1264747 * bsc#1266410 * bsc#1266848 * bsc#1267464 * bsc#1267672 * bsc#1271817 * bsc#1271901 * bsc#1271950 * bsc#1272145 * bsc#1272215 * bsc#1272347 * bsc#1272388 * bsc#1272473 * bsc#1272571 * bsc#1272802 * bsc#1272803 * bsc#1272890 * bsc#1273040 * bsc#1273059 * bsc#1273116 * bsc#1273258 * bsc#1273275 * bsc#1273290 * bsc#1273297 * bsc#1273320 * bsc#1273491 * bsc#1273512 * bsc#1273784 * bsc#1273879 * bsc#1273889 * bsc#1273938 * bsc#1273970 * bsc#1273976 * bsc#1273982 * bsc#1274037 * bsc#1274061 * bsc#1274245 * bsc#1274297 * bsc#1274298 * bsc#1274316 * bsc#1274319 * bsc#1274538 * bsc#1274629 * bsc#1274663 * bsc#1274776 * bsc#1274818 * bsc#1274824 * bsc#1274836 * bsc#1274890 * bsc#1274912 * bsc#1274920 * bsc#1275137 * bsc#1275142 * bsc#1275170 * bsc#1275495 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275682 * bsc#1275740 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1276007 * bsc#1276009 * bsc#1276262 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276340 * bsc#1276345 * bsc#1276347 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276388 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276519 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276573 * bsc#1276579 * bsc#1276783 * bsc#1276852 * bsc#1276921 * bsc#1276923 * bsc#1276927 * bsc#1276930 * bsc#1276947 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277098 * bsc#1277101 * bsc#1277109 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277149 * bsc#1277153 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277234 * bsc#1277245 * bsc#1277272 * bsc#1277277 * bsc#1277296 * bsc#1277314 * bsc#1277342 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277379 * bsc#1277382 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277568 * bsc#1277615 * bsc#1277625 * bsc#1277626 * bsc#1277640 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277766 * bsc#1277781 * bsc#1277784 * bsc#1277792 * bsc#1277801 * bsc#1277805 * bsc#1277820 * bsc#1277823 * bsc#1277824 * bsc#1277840 * bsc#1277843 * bsc#1277844 * bsc#1277857 * bsc#1277864 * bsc#1277885 * bsc#1277892 * bsc#1277895 * bsc#1277896 * bsc#1277897 * bsc#1277900 * bsc#1277904 * bsc#1277906 * bsc#1277910 * bsc#1277913 * bsc#1277915 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278087 * bsc#1278091 * bsc#1278100 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278215 * bsc#1278216 * bsc#1278225 * bsc#1278245 * bsc#1278247 * bsc#1278255 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278363 * bsc#1278708 * bsc#1279116 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279569 * bsc#1279581 * bsc#1279590 * bsc#1279621 * bsc#1279702 * bsc#1279786 * bsc#1279799 * bsc#1279819 * bsc#1279835 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280163 * bsc#1280166 * bsc#1280171 * bsc#1280178 * bsc#1280179 * bsc#1280184 * bsc#1280193 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280251 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280299 * bsc#1280303 * bsc#1280309 * bsc#1280333 * bsc#1280334 * bsc#1280335 * bsc#1280336 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280384 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280464 * bsc#1280468 * bsc#1280477 * bsc#1280487 * bsc#1280488 * bsc#1280490 * bsc#1280494 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280525 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280576 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280720 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280758 * bsc#1280761 * bsc#1280766 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280901 * bsc#1280920 * bsc#1280923 * bsc#1280969 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281014 * bsc#1281025 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281136 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281228 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281379 * bsc#1281387 * bsc#1281399 * bsc#1281408 * bsc#1281496 * bsc#1281514 * bsc#1281525 * bsc#1281546 * bsc#1281597 * bsc#1281599 * bsc#1281644 * bsc#1281645 * bsc#1281660 * bsc#1281680 * bsc#1281682 * bsc#1281683 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281754 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281795 * bsc#1281808 * bsc#1281825 * bsc#1281845 * bsc#1281922 * bsc#1281955 * bsc#1281956 * bsc#1281964 * bsc#1281973 * bsc#1281991 * bsc#1282003 * bsc#1282013 * bsc#1282020 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282147 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282288 * bsc#1282648 * bsc#1282672 * bsc#1282747 * bsc#1282774 * bsc#1282803 * bsc#1282808 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282975 * bsc#1282997 * bsc#1283119 * bsc#1283130 * bsc#1283149 * bsc#1283154 * bsc#1283163 * bsc#1283166 * bsc#1283173 * bsc#1283176 * bsc#1283201 * bsc#1283203 * bsc#1283205 * bsc#1283213 * bsc#1283230 * bsc#1283296 * bsc#1283312 * bsc#1283328 * bsc#1283450 * bsc#1283475 * bsc#1283479 * bsc#1283489 * bsc#1283490 * bsc#1283517 * bsc#1283739 * bsc#1283794 * bsc#1283795 * bsc#1283805 * bsc#1283880 * bsc#1283906 * bsc#1283945 * bsc#1284146 * jsc#PED-16852 * jsc#PED-16854 * jsc#PED-16892 * jsc#PED-16906 * jsc#PED-16993 Cross-References: * CVE-2025-40136 * CVE-2026-100075 * CVE-2026-23199 * CVE-2026-23352 * CVE-2026-43210 * CVE-2026-43272 * CVE-2026-43409 * CVE-2026-45836 * CVE-2026-46044 * CVE-2026-46196 * CVE-2026-46272 * CVE-2026-53377 * CVE-2026-53384 * CVE-2026-63838 * CVE-2026-63881 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63983 * CVE-2026-64009 * CVE-2026-64046 * CVE-2026-64070 * CVE-2026-64132 * CVE-2026-64154 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64216 * CVE-2026-64235 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64324 * CVE-2026-64372 * CVE-2026-64377 * CVE-2026-64388 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64414 * CVE-2026-64418 * CVE-2026-64422 * CVE-2026-64448 * CVE-2026-64457 * CVE-2026-64473 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64580 * CVE-2026-64594 * CVE-2026-64597 * CVE-2026-64598 * CVE-2026-68146 * CVE-2026-68162 * CVE-2026-68264 * CVE-2026-68266 * CVE-2026-68290 * CVE-2026-68312 * CVE-2026-68343 * CVE-2026-68367 * CVE-2026-68376 * CVE-2026-68382 * CVE-2026-68385 * CVE-2026-68400 * CVE-2026-68441 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72018 * CVE-2026-72025 * CVE-2026-72066 * CVE-2026-72070 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72128 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72147 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72299 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72491 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74281 * CVE-2026-74283 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74330 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74365 * CVE-2026-74376 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74389 * CVE-2026-74391 * CVE-2026-74398 * CVE-2026-74440 * CVE-2026-74449 * CVE-2026-74450 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74480 * CVE-2026-74483 * CVE-2026-74484 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74538 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74590 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74602 * CVE-2026-74603 * CVE-2026-74605 * CVE-2026-74606 * CVE-2026-74609 * CVE-2026-74625 * CVE-2026-74628 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74634 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74662 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74692 * CVE-2026-74694 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74739 * CVE-2026-74745 * CVE-2026-74752 * CVE-2026-80521 * CVE-2026-80585 * CVE-2026-80613 * CVE-2026-80631 * CVE-2026-80664 * CVE-2026-80679 * CVE-2026-80686 * CVE-2026-80694 * CVE-2026-80715 * CVE-2026-80725 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80779 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80851 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80895 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80979 * CVE-2026-80980 * CVE-2026-80983 * CVE-2026-80984 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89453 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89500 * CVE-2026-89501 * CVE-2026-89502 * CVE-2026-89503 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89526 * CVE-2026-89527 * CVE-2026-89530 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89534 * CVE-2026-89535 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89545 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89644 * CVE-2026-89658 * CVE-2026-89660 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89669 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89683 * CVE-2026-89684 * CVE-2026-89685 * CVE-2026-89686 * CVE-2026-89688 * CVE-2026-89690 * CVE-2026-89691 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89698 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89703 * CVE-2026-89704 * CVE-2026-89705 * CVE-2026-89706 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89747 * CVE-2026-89780 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89791 * CVE-2026-89798 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90065 * CVE-2026-90074 * CVE-2026-90097 * CVE-2026-90101 * CVE-2026-90104 * CVE-2026-90142 * CVE-2026-90149 * CVE-2026-90150 * CVE-2026-90151 * CVE-2026-90177 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90240 * CVE-2026-90241 * CVE-2026-90243 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90426 * CVE-2026-90428 * CVE-2026-90430 * CVE-2026-92495 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93160 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93800 * CVE-2026-93810 * CVE-2026-93814 * CVE-2026-93825 * CVE-2026-93826 * CVE-2026-93827 * CVE-2026-93829 * CVE-2026-97413 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97520 * CVE-2026-97521 * CVE-2026-97543 * CVE-2026-97544 * CVE-2026-97545 * CVE-2026-97546 * CVE-2026-97552 * CVE-2026-97557 * CVE-2026-97571 * CVE-2026-97572 * CVE-2026-97573 * CVE-2026-97574 * CVE-2026-97605 * CVE-2026-97902 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97947 * CVE-2026-97957 * CVE-2026-98003 * CVE-2026-98028 * CVE-2026-98029 * CVE-2026-98030 * CVE-2026-98091 CVSS scores: * CVE-2025-40136 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-40136 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23199 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23199 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23199 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43272 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46272 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53377 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63838 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63881 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63881 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64132 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64132 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64154 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64154 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64154 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64216 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64216 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64216 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64235 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64235 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64324 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64324 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64324 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64377 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64388 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64388 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N * CVE-2026-64388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64414 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64418 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64418 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64418 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64448 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64473 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64594 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64594 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-64597 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64598 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68264 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68264 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68266 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68266 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68343 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68367 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68382 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68385 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68385 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68400 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72018 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72018 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72070 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72128 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72128 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72147 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72147 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72491 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72491 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74440 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74440 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74449 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74449 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74483 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74484 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74538 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74538 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74590 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74602 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74602 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74605 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74605 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74606 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74606 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74628 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74628 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74634 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74634 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74692 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74692 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74694 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74694 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74745 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74745 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80521 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80694 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80779 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80779 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80851 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80895 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80895 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80979 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80979 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80980 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80980 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80980 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89453 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89500 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89501 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89502 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89503 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89526 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89526 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89527 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89527 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89530 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89530 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89530 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89534 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89534 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89535 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89535 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89535 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89545 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89545 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89658 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89660 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89683 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89688 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89690 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89690 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89691 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89691 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89698 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89703 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89703 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89705 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89747 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89747 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89780 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89791 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89791 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90065 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90150 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90150 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90177 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90240 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90240 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90241 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90241 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90243 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-90243 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90243 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90426 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90428 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93160 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-93160 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93814 ( SUSE ): 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93825 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93825 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93827 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93827 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97413 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97413 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97413 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97520 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97520 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97520 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-97521 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97521 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97543 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97543 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97544 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97544 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97545 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97545 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97546 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97546 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97552 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97552 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97572 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97573 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97573 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97605 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97605 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97902 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97902 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97947 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97957 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98028 ( SUSE ): 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98029 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98029 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98030 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98030 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves 401 vulnerabilities, contains five features and has 12 fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-40136: crypto: hisilicon/qm - request reserved interrupt for virtual function (bsc#1253340). * CVE-2026-23199: procfs: avoid fetching build ID while holding VMA lock (bsc#1258335). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-43210: tracing: ring-buffer: Fix to check event length before using (bsc#1264330). * CVE-2026-43272: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46272: coresight: tmc-etr: Fix race condition between sysfs and perf mode (bsc#1267672). * CVE-2026-53377: drm/msm: always recover the gpu (bsc#1271901). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-63838: ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] (bsc#1272388). * CVE-2026-63881: drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger (bsc#1272571). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64132: ipv6: ioam: refresh hdr pointer before ioam6_event() (bsc#1272347). * CVE-2026-64154: drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() (bsc#1271950). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64216: netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() (bsc#1272802). * CVE-2026-64235: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines (bsc#1272803). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64324: udf: validate free block extents against the partition length (bsc#1273970). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64377: cpufreq: qcom-cpufreq-hw: Fix possible double free (bsc#1273297). * CVE-2026-64388: smb/client: fix chown/chgrp with SMB3 POSIX Extensions (bsc#1274061). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: separate CIS_LINK and BIS_LINK link types (bsc#1273512). * CVE-2026-64414: netfilter: handle unreadable frags (bsc#1273275). * CVE-2026-64418: mm: shrinker: fix shrinker_info teardown race with expansion (bsc#1273784). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64448: smb: client: restrict implied bcc[0] exemption to responses without data area (bsc#1273982). * CVE-2026-64457: virtio_pci: fix vq info pointer lookup via wrong index (bsc#1273491). * CVE-2026-64473: vfio: Remove device debugfs before releasing devres (bsc#1273320). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64594: usb: gadget: f_fs: initialize reset_work at allocation time (bsc#1274538). * CVE-2026-64597: smb: client: fix double-free in SMB2_close() replay (bsc#1274297). * CVE-2026-64598: smb/client: Fix error code in smb2_aead_req_alloc() (bsc#1274298). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68264: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() (bsc#1275142). * CVE-2026-68266: drm/xe: Hold a dma-buf reference for imported BOs (bsc#1275137). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68312: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (bsc#1274663). * CVE-2026-68343: smb: client: validate DFS referral PathConsumed (bsc#1274629). * CVE-2026-68367: usb: gadget: f_tcm: synchronize delayed set_alt with teardown (bsc#1275170). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68382: drm/xe/guc: Hold device ref until queue teardown completes (bsc#1274824). * CVE-2026-68385: s390/checksum: Fix csum_partial() without vector facility (bsc#1274818). * CVE-2026-68400: KVM: arm64: Mask response to FFA_FEATURE call (bsc#1274912). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72018: dibs: loopback: validate offset and size in move_data() (bsc#1276852). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72070: wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() (bsc#1277153). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72128: nvmet: fix refcount leak in nvmet_sq_create() (bsc#1277101). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet-auth: reject short AUTH_RECEIVE buffers (bsc#1275549). * CVE-2026-72147: dmaengine: dw-edma-pcie: Reject devices without driver data (bsc#1277234). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72491: net/9p: fix race condition on rdma->state in trans_rdma.c (bsc#1276947). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74356: vhost: fix vhost_get_avail_idx for a non empty ring (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74365: nvdimm/btt: Handle preemption in BTT lane acquisition (bsc#1278225). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74440: drm/xe: Wait on external BO kernel fences in exec IOCTL (bsc#1261564). * CVE-2026-74449: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport (bsc#1278215). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74483: binfmt_misc: don't leak the user namespace when the mount fails (bsc#1276347). * CVE-2026-74484: binfmt_misc: don't let an 'F' entry pin its own instance (bsc#1276345). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74538: Bluetooth: ISO: lock sk in iso_connect_ind (bsc#1275682). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74590: fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions (bsc#1277824). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74602: ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() (bsc#1277895). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74605: eventfs: Use children field for rcu head and add memory barriers (bsc#1277913). * CVE-2026-74606: eventfs: Fix use-after-free in eventfs_remove_rec() (bsc#1277864). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74628: net/x25: fix use-after-free of the socket by its timers (bsc#1277844). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74634: ring-buffer: Prevent subbuf order change when resizing is disabled (bsc#1277379). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf/core: Fix group leader use-after-free after sibling detach (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74662: inet: frags: add inet_frag_putn() helper (bsc#1277277). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74692: net/smc: fix TOCTOU race between smc_listen_out() and listener close (bsc#1276927). * CVE-2026-74694: net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length (bsc#1277625). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74745: eth: bnxt: decrease indent in bnxt_request_irq() (bsc#1277382). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80521: af_unix: Unlink scc_entry in unix_del_edge() (bsc#1277568). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80694: net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller (bsc#1278363). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80779: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ (bsc#1279590). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80851: gtp: serialize PDP context updates (bsc#1279569). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80895: mshv: Order pt_vp_array publish against irqfd assertion path (bsc#1279702). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80979: net/smc: unregister the connection before draining the rx tasklet (bsc#1280299). * CVE-2026-80980: net/smc: Address spelling errors (bsc#1280303). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-80984: net/smc: do not dereference an unset send buffer on the SMC-D teardown path (bsc#1280309). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89453: iommu/amd: Put PCI device after handling PPR faults (bsc#1280384). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89500: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page (bsc#1280333). * CVE-2026-89501: ring-buffer: Hold cpu_buffer::lock when resizing a subbuf (bsc#1280335). * CVE-2026-89502: ring-buffer: Free cpu_buffer::free_page with subbuf_order (bsc#1280336). * CVE-2026-89503: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() (bsc#1280334). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89526: svcrdma: Validate Read chunk positions before reconstruction (bsc#1280901). * CVE-2026-89527: svcrdma: Use svc_xprt_put to free listener on create failure (bsc#1281754). * CVE-2026-89530: svcrdma: Reject inline replies that overflow the pull-up buffer (bsc#1280920). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89534: svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails (bsc#1280766). * CVE-2026-89535: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id (bsc#1280761). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89545: sunrpc: defer rq_argp and rq_resp free until after RCU grace period (bsc#1280720). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89658: NFSD: Prevent client use-after-free during NFSv4.0 revoked- state cleanup (bsc#1280576). * CVE-2026-89660: NFSD: Prevent client use-after-free during admin state revocation (bsc#1280525). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89669: nfsd: initialize copy-notify stateid before publishing it (bsc#1280251). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89683: nfsd: fix dentry ref leak on V4ROOT export filehandle lookup (bsc#1280193). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89688: nfsd: drop the stateid, not the stateowner, on seqid_op replay retry (bsc#1280171). * CVE-2026-89690: nfsd: defer vfree of compound ops to fix rpc_status UAF (bsc#1280166). * CVE-2026-89691: nfsd: clear opcnt on compound arg release to prevent OOB read (bsc#1280163). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89698: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage (bsc#1280494). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89703: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations (bsc#1280488). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89705: nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths (bsc#1280464). * CVE-2026-89706: nfsd: Reset write verifier when async COPY writeback fails (bsc#1280477). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89747: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (bsc#1281025). * CVE-2026-89780: net: qualcomm: rmnet: restore skb->dev on deaggregated frames (bsc#1280969). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89791: perf: Fix use-after-free when perf mmap() revival races with the last munmap() (bsc#1281228). * CVE-2026-89798: svcrdma: Fix unmatched rn_unregister on failed accept (bsc#1281136). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet: add a helper function for cqid checking (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90065: net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure (bsc#1281660). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525 bsc#1283517). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90142: virtio_net: Fix resize of the RX ring (bsc#1281597). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90150: pnfs/blocklayout: Fix device leaks on parse failure (bsc#1281956). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90177: bpf: Check pointer type for all atomic RMW paths (bsc#1281645). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90240: iommu/vt-d: Flush context cache with correct SID when tearing down aliases (bsc#1281683). * CVE-2026-90241: iommu/vt-d: Tear down scalable-mode context on probe failure (bsc#1281682). * CVE-2026-90243: iommu/vt-d: Clear Present bit before tearing down copied context entry (bsc#1281845). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90426: iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs (bsc#1282013). * CVE-2026-90428: iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs (bsc#1282003). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93160: crypto: atmel-ecc - reject hardware ECDH without a public key (bsc#1282147). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93814: spi: core: Abort active target transfer on controller suspend. * CVE-2026-93825: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data(). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93827: virtio-fs: avoid double-free on failed queue setup (bsc#1282747). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97413: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write (bsc#1282975). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97520: gfs2: move quota_init qc iterator increment (bsc#1283479). * CVE-2026-97521: gfs2: fix quota init duplicate scan (bsc#1283475). * CVE-2026-97543: xfs: destroy seen inode bitmap when we fail to add a dirpath (bsc#1283450). * CVE-2026-97544: xfs: don't leak dqacct if rhashtable insertion fails (bsc#1283149). * CVE-2026-97545: xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails (bsc#1283205). * CVE-2026-97546: xfs: don't spin forever on zero-length dirents when salvaging them (bsc#1283203). * CVE-2026-97552: xfs: initialise error in xfs_defer_finish_one() (bsc#1283328). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283517 bsc#1283945). * CVE-2026-97572: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (bsc#1283517 bsc#1283794). * CVE-2026-97573: bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() (bsc#1283517 bsc#1283880). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283517 bsc#1283795). * CVE-2026-97605: erofs: preserve LZMA decoders on resize failure (bsc#1283173). * CVE-2026-97902: fs: don't return -EINVAL for successful nested thaw (bsc#1283166). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97947: x86/amd_node: Avoid divide by zero on virtualized systems (bsc#1283130). * CVE-2026-97957: net: hinic: fix mailbox segment buffer overflow (bsc#1283119). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98028: eth: nfp: drop the replaced rule from the list when reprogramming fails (bsc#1283739). * CVE-2026-98029: eth: nfp: bound the ntuple rule dump by the caller's buffer size (bsc#1283490). * CVE-2026-98030: net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size (bsc#1283489). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge (stable-fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: core: Add scoped cleanup helper for card references (stable-fixes). * ALSA: core: Define auto-cleanup for snd_card_free() (stable-fixes). * ALSA: core: Fix potential UAF after asynchronous card release (stable- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) (stable- fixes). * ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) (stable-fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Pavilion x360 (stable-fixes). * ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 (stable-fixes). * ALSA: hda/realtek: Add StarFighter HDA SSID (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/realtek: Limit Star Labs internal mic boost (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk (stable-fixes). * ALSA: hda: cs35l56: Fail if wmfw file is missing (stable-fixes). * ALSA: hda: ext: Clean up links if their initialization fails (stable-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup (git- fixes). * ALSA: ice1712: Fix the error handling via auto-cleanup at probe (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Remove arbitrary prioq insertion limit (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: ump: Copy FB name string more safely (stable-fixes). * ALSA: ump: Copy safe string name to rawmidi (stable-fixes). * ALSA: ump: Update rawmidi name per EP name update (stable-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity (git- fixes). * ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling (stable-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: fixmap: Allow 256K early_ioremap() at any offset (git-fixes). * arm64: hibernate: clone only the linear map that exists at runtime (git- fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: kprobes: Allow reentering kprobes while single-stepping (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: codecs: aw88261: only check PLL and clock state at power-up (git- fixes). * ASoC: codecs: aw88261: reduce log spam (stable-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type (git- fixes). * ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit (stable-fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: sof_sdw: Add quirks for new Dell laptops (stable-fixes). * ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally (stable-fixes). * ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() (stable-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt712-sdca: reset codec at io_init to fix silent headphone (stable- fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: tas2781: Update default register address to TAS2563 (stable-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW (stable-fixes). * Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit (git- fixes). * Bluetooth: btintel_pcie: validate device-supplied DMA indices (git-fixes). * Bluetooth: btmtk: add MT7902 MCU support (stable-fixes). * Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 (stable-fixes). * Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events (git- fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 (stable-fixes). * Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 (stable-fixes). * Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c (stable-fixes). * Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 (stable-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_conn: fix CIS hold ownership on reuse (git-fixes). * Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained (git- fixes). * Bluetooth: hci_core: Print number of packets in conn->data_q (stable-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: ISO: balance the parent hold in hci_bind_bis() (git-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: ISO: release unused CIS holds after channel attach (git-fixes). * Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync (git-fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: mgmt: fix race in read_unconf_index_list() (git-fixes). * Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform (git-fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: Bound SW TPA IDs to prevent crashes (git-fixes). * bnxt_en: Fix potential data corruption with HW GRO/LRO (git-fixes). * bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check (bsc#1283517). * bnxt_en: Only restore LRO if the device supports TPA (bsc#1283517). * bnxt_en: Write doorbell when linearizing skb fails (bsc#1283517). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1275740). * btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag (bsc#1279116). * btrfs: tree-checker: validate INODE_REF's namelen (git-fixes). * config: cleanup azure and kvmsmall Cleanup azure and kvmsmall configs after following comments updated default configs: 4229ca50b2b3 Disable CONFIG_BATMAN_ADV (jsc#PED-16892). * dmaengine: Add devm_dma_request_chan() (stable-fixes). * dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes (stable-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Export get_dev_from_fwnode() (stable-fixes). * drm/amd/display: Bump frame warning limit for clang builds of dml (stable- fixes). * drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend (git- fixes). * drm/amd/display: Check for sharpening case when calculating max vtaps for scaler (stable-fixes). * drm/amd/display: clean-up dead code in dml2_mall_phantom (stable-fixes). * drm/amd/display: Find link encoder for flexible DIG mapping cases (stable- fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/display: Initialize dsc_caps to 0 (stable-fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amd/pm: hide pp_table sysfs on APUs (git-fixes). * drm/amdgpu: add a helper to calculate ring distance (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: Failed to check various return code (stable-fixes). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: harden FRU PIA parsing with bounded helpers (stable-fixes). * drm/amdgpu: Prefer ROM BAR for default VGA device (stable-fixes). * drm/amdgpu: Skip accessing psp rum time db for APUs (stable-fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device (stable- fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/i915/psr: Add new SU area calculation helper to apply workarounds (stable-fixes). * drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable (git- fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/imagination: clamp freelist reconstruction requests (git-fixes). * drm/imagination: Fix page count for page table for map() interface (git- fixes). * drm/imagination: Populate FW common context ID before passing to the FW (stable-fixes). * drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() (git-fixes). * drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER (git-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: dsi: Add compatible for mt8167-dsi (stable-fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/msm: Recover HW before retire hung submit (git-fixes). * drm/nouveau/bios: skip the IFR header if present (stable-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM (git-fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: RCU-free the scheduler-containing nouveau_sched (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: Enable GPIOLIB for panels which uses functions from it (stable- fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV (git-fixes). * drm/xe: Wait on external BO kernel fences in exec IOCTL (CVE-2026-74440 bsc#1261564). * drm: add drm_memory_stats_is_zero (stable-fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * fbcon: don't suspend/resume when vc is graphics mode (stable-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: qcom_scm: Rename peripheral as pas_id (stable-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * firmware: sysfb: Move bpp-depth calculation into screen_info helper (stable- fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: tps65219: Fix GPIO input value reads (git-fixes). * gpio: virtuser: skip free_irq when no IRQ is installed (git-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: alps: unregister DualPoint Stick input device on remove (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: asus: fortify keyboard handshake (stable-fixes). * HID: bpf: Add Huion Inspiroy Frego M button quirk (stable-fixes). * HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request (git-fixes). * HID: bpf: fix __hid_bpf_hw_check_params report length (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM (stable-fixes). * HID: hidpp: fix potential UAF in hidpp_connect_event() (stable-fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes (git-fixes). * HID: mcp2221: fix OOB write in mcp2221_raw_event() (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (corsair-psu) Fix linear11 calculation (stable-fixes). * hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist (stable- fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() (git-fixes). * hwmon: (hp-wmi-sensors) Improve raw WMI string handling (git-fixes). * hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() (stable- fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (raspberrypi) Fix delayed-work teardown race (stable-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: atr: fix dangling adapter pointer on add failure (git-fixes). * i2c: imx: disable autosuspend on remove (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i2c: mxs: fix DMA channel leak on probe error (git-fixes). * i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() (git-fixes). * i2c: qcom-cci: Remove the unused variable cci_clk_rate (git-fixes). * i2c: qcom-cci: Stop complaining about DT set clock rate (stable-fixes). * i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode (git-fixes). * i3c: mipi-i3c-hci: Quieten initialization messages (stable-fixes). * i3c: mipi-i3c-hci: Refactor PIO register initialization (stable-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * ibmveth: Add multi buffers rx replenishment hcall support (jsc#PED-16852). * ibmvnic: Increase max subcrq indirect entries with fallback (jsc#PED-16854). * ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (jsc#PED-16854). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: pac1934: check ACPI label duplication (git-fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: rtq6056: add i2c_device_id support (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: admv1013: initialize callback mutex before registering notifier (git- fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: health: max30102: fix NULL dereference in interrupt handler (git- fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: aw96103: validate firmware data length (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * kernel-binary.spec.in: Fix syntax error. * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * keys: translate request_key_auth pid for the reading procfs instance (git- fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure (git- fixes). * KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() (git- fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Prevent speculative SPI array underflow (git-fixes). * KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU (git- fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (git- fixes). * KVM: nVMX: Synthesize SHUTDOWN on RSM if L2 requires emulation (git-fixes). * KVM: VMX: Handle bad values on proxied writes to LBR MSRs (git-fixes). * KVM: VMX: Reject KVM_RUN if userspace forces emulation during nested VM- Enter (git-fixes). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() (git- fixes). * KVM: x86: Extract VMX's unhandleable emulation check to common x86 (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: chips-media: wave5: Add range checks for dec_output_info (stable- fixes). * media: chips-media: wave5: Fix Reports from Kernel Lock Validator (stable- fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: i2c: imx355: Replace client->dev usage (stable-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: imx355: Avoid calling imx355_power_off twice in error path (git- fixes). * media: qcom: camss: avoid format string warning (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Fold dbx500 header into db8500 (git-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mfd: tps65219: Make poweroff handler conditional on system-power-controller (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mmci: Fix use-after-free in busy-timeout work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Clear ITAPDLY on tuning failure (git-fixes). * mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure (git-fixes). * mmc: sdhci_am654: Move tuning_loop to local variable (git-fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: block2mtd: Fix divide error when erase_size is zero (git-fixes). * mtd: core: avoid double-free of OTP NVMEM device (git-fixes). * mtd: core: call _get_device() with the master MTD (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: pl353: Add message about ECC mode (stable-fixes). * mtd: rawnand: pl353: Fix debug prints (git-fixes). * mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses (git-fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net/ibmveth: fix comment typos in ibmveth.c (jsc#PED-16852). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: page_pool: Remove zone/policy GFP flags when allocating XArray entries (git-fixes). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (stable- fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid FLR for MediaTek MT7925 WiFi (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk (git- fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: of_property: Omit bus properties without a subordinate bus (git-fixes). * PCI: plda: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * pinctrl: sunxi: keep a shadow copy of the data register output latches (git- fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: hp-bioscfg: bound ordered-list parsing by the package count (stable-fixes). * platform/x86: hp-bioscfg: pass validated element count to package parsers (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * platform/x86: ISST: Check for admin capability for write commands (stable- fixes). * platform/x86: ISST: Validate max level for set feature (git-fixes). * platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen (stable- fixes). * platform/x86: sel3350-platform: Retain LED state on load and unload (stable- fixes). * platform/x86: think-lmi: improve check if BIOS account security enabled (stable-fixes). * power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() (git-fixes). * power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() (git- fixes). * power: supply: ab8500_fg: fix use-after-free on remove (git-fixes). * power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/perf: Add power12 Base Performance Monitoring support (jsc#PED-16906). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Limit PVR list to 16 entries for CAS negotiation (jsc#PED-16906). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc: Add Power12 architected mode (jsc#PED-16906). * powerpc: Add Power12 raw mode (jsc#PED-16906). * procfs: fix possible double mmput() in do_procmap_query() (git-fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/core: Fix potential use after free in counter_release() (git-fixes). * RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_cq_user() (git-fixes). * RDMA/core: Fix potential use after free in ib_destroy_srq_user() (git- fixes). * RDMA/core: Fix potential use after free in ib_free_cq() (git-fixes). * RDMA/core: Fix use after free in ib_query_qp() (git-fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Free RX data on late probe failure (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Preserve unit 0 on (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * RDMA/rvt: Return NULL after port allocation failure (git-fixes). * regulator: core: clamp voltage constraints before applying apply_uV (stable- fixes). * regulator: da9121: Use subvariant ids in the I2C table (stable-fixes). * ring-buffer: Add helper functions for allocations (bsc#1277895 bsc#1280334). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * ring-buffer: Simplify functions with __free(kfree) to free allocations (bsc#1277895 bsc#1280334). * rtc: ac100: Assign .num before accessing .hws (git-fixes). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak (git-fixes). * rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() (git- fixes). * rtc: mv: add suspend/resume support for wakeup (stable-fixes). * rtc: spear: initialize IRQ state before requesting alarm IRQ (git-fixes). * selftests: fib_nexthops: do not mark skipped tests as failed (bsc#1283296). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: fix TIOCMIWAIT race (git-fixes). * serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() (git- fixes). * serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around (git-fixes). * serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL (git- fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * smb: client: reject overlapping data areas in SMB2 responses (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: intel: Move suspend tracking from trigger to pm suspend (stable- fixes). * soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list (stable- fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: dw-dma: Wait for controller idle before completing Tx (git-fixes). * spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (git-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds (git-fixes). * thunderbolt: Avoid reserved fields in path config space for USB4 routers (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tpm: Disable TPM on null key name mismatch (git-fixes). * tty: serial: max3100: shut down timer before freeing port (git-fixes). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: cdns3: rename hibernated argument of role->resume() to lost_power (stable-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_fs: Fix Use-After-Free in AIO error path (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: ffs: fix mm lifetime handling (stable-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: midi2: Fix the jack descriptor array sizes (git-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix ioctl hangup race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: Improve Soft Retries after short transfers (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * vt: skip screen update for DEC alignment test on backgroup consoles (git- fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 (stable-fixes). * watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform (stable- fixes). * watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk (stable-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() (git- fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: don't get the radio mask for netdev-less wdevs (git-fixes). * wifi: cfg80211: expose cfg80211_chandef_get_width() (stable-fixes). * wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: reject duplicate wiphy cipher suite entries (stable-fixes). * wifi: cfg80211: skip regulatory for punctured subchannels (stable-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: parse beacon notif per layout (stable-fixes). * wifi: iwlwifi: mvm: validate mac_link_id in session protect notif (stable- fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: iwlwifi: mvm: validate TX_CMD response layout (stable-fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: abort chanswitch when leaving a mesh (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow injecting frames wider than the chanctx (git- fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed (stable-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: explicitly disable FTM responder on AP stop (stable-fixes). * wifi: mac80211: ibss: wait for in-flight TX on disconnect (stable-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: mesh: reset the CSA state when leaving (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: add init_wiphy callback (stable-fixes). * wifi: mt76: mt7915: set correct background radar capability (stable-fixes). * wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv (stable-fixes). * wifi: mt76: mt7925: add Netgear A8500 USB device ID (stable-fixes). * wifi: mt76: mt7925: advertise EHT 320MHz capabilities for 6GHz band (stable- fixes). * wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum (git-fixes). * wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS (stable-fixes). * wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec (stable-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: prevent authentication frame length truncation (git-fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: cleanup unused rtwdev::roc_work (stable-fixes). * wifi: rtw89: disable CSI STBC for VHT 160MHz (stable-fixes). * wifi: rtw89: Hide some errors when the device is unplugged (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1904 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * dlm-kmp-default-debuginfo-6.12.0-160000.39.1 * kernel-default-debuginfo-6.12.0-160000.39.1 * cluster-md-kmp-default-6.12.0-160000.39.1 * kernel-default-debugsource-6.12.0-160000.39.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.39.1 * dlm-kmp-default-6.12.0-160000.39.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.39.1 * gfs2-kmp-default-6.12.0-160000.39.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (nosrc) * kernel-default-6.12.0-160000.39.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40136.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23199.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-43210.html * https://www.suse.com/security/cve/CVE-2026-43272.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46272.html * https://www.suse.com/security/cve/CVE-2026-53377.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-63838.html * https://www.suse.com/security/cve/CVE-2026-63881.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64132.html * https://www.suse.com/security/cve/CVE-2026-64154.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64216.html * https://www.suse.com/security/cve/CVE-2026-64235.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64324.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64377.html * https://www.suse.com/security/cve/CVE-2026-64388.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64414.html * https://www.suse.com/security/cve/CVE-2026-64418.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64448.html * https://www.suse.com/security/cve/CVE-2026-64457.html * https://www.suse.com/security/cve/CVE-2026-64473.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64594.html * https://www.suse.com/security/cve/CVE-2026-64597.html * https://www.suse.com/security/cve/CVE-2026-64598.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68264.html * https://www.suse.com/security/cve/CVE-2026-68266.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68312.html * https://www.suse.com/security/cve/CVE-2026-68343.html * https://www.suse.com/security/cve/CVE-2026-68367.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68382.html * https://www.suse.com/security/cve/CVE-2026-68385.html * https://www.suse.com/security/cve/CVE-2026-68400.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72018.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72070.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72128.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72147.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72491.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74440.html * https://www.suse.com/security/cve/CVE-2026-74449.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74483.html * https://www.suse.com/security/cve/CVE-2026-74484.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74538.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74590.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74602.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74605.html * https://www.suse.com/security/cve/CVE-2026-74606.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74628.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74634.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74662.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74692.html * https://www.suse.com/security/cve/CVE-2026-74694.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74745.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80521.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80694.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80779.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80851.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80895.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80979.html * https://www.suse.com/security/cve/CVE-2026-80980.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-80984.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89453.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89500.html * https://www.suse.com/security/cve/CVE-2026-89501.html * https://www.suse.com/security/cve/CVE-2026-89502.html * https://www.suse.com/security/cve/CVE-2026-89503.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89526.html * https://www.suse.com/security/cve/CVE-2026-89527.html * https://www.suse.com/security/cve/CVE-2026-89530.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89534.html * https://www.suse.com/security/cve/CVE-2026-89535.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89545.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89658.html * https://www.suse.com/security/cve/CVE-2026-89660.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89683.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89688.html * https://www.suse.com/security/cve/CVE-2026-89690.html * https://www.suse.com/security/cve/CVE-2026-89691.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89698.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89703.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89705.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89747.html * https://www.suse.com/security/cve/CVE-2026-89780.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89791.html * https://www.suse.com/security/cve/CVE-2026-89798.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90065.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90142.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90150.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90177.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90240.html * https://www.suse.com/security/cve/CVE-2026-90241.html * https://www.suse.com/security/cve/CVE-2026-90243.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90426.html * https://www.suse.com/security/cve/CVE-2026-90428.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93160.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93814.html * https://www.suse.com/security/cve/CVE-2026-93825.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93827.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97413.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97520.html * https://www.suse.com/security/cve/CVE-2026-97521.html * https://www.suse.com/security/cve/CVE-2026-97543.html * https://www.suse.com/security/cve/CVE-2026-97544.html * https://www.suse.com/security/cve/CVE-2026-97545.html * https://www.suse.com/security/cve/CVE-2026-97546.html * https://www.suse.com/security/cve/CVE-2026-97552.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97572.html * https://www.suse.com/security/cve/CVE-2026-97573.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97605.html * https://www.suse.com/security/cve/CVE-2026-97902.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97947.html * https://www.suse.com/security/cve/CVE-2026-97957.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98028.html * https://www.suse.com/security/cve/CVE-2026-98029.html * https://www.suse.com/security/cve/CVE-2026-98030.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://bugzilla.suse.com/show_bug.cgi?id=1253340 * https://bugzilla.suse.com/show_bug.cgi?id=1258335 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1261564 * https://bugzilla.suse.com/show_bug.cgi?id=1261816 * https://bugzilla.suse.com/show_bug.cgi?id=1264330 * https://bugzilla.suse.com/show_bug.cgi?id=1264607 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267672 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271901 * https://bugzilla.suse.com/show_bug.cgi?id=1271950 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272347 * https://bugzilla.suse.com/show_bug.cgi?id=1272388 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272571 * https://bugzilla.suse.com/show_bug.cgi?id=1272802 * https://bugzilla.suse.com/show_bug.cgi?id=1272803 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273275 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273297 * https://bugzilla.suse.com/show_bug.cgi?id=1273320 * https://bugzilla.suse.com/show_bug.cgi?id=1273491 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273784 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273970 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273982 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274061 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274297 * https://bugzilla.suse.com/show_bug.cgi?id=1274298 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274538 * https://bugzilla.suse.com/show_bug.cgi?id=1274629 * https://bugzilla.suse.com/show_bug.cgi?id=1274663 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274818 * https://bugzilla.suse.com/show_bug.cgi?id=1274824 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274912 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275137 * https://bugzilla.suse.com/show_bug.cgi?id=1275142 * https://bugzilla.suse.com/show_bug.cgi?id=1275170 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275682 * https://bugzilla.suse.com/show_bug.cgi?id=1275740 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276262 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276345 * https://bugzilla.suse.com/show_bug.cgi?id=1276347 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276852 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276927 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1276947 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277101 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277153 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277234 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277277 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277379 * https://bugzilla.suse.com/show_bug.cgi?id=1277382 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277568 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277625 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277824 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277844 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277864 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277895 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277913 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278215 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278363 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1279116 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279569 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279590 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279702 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280163 * https://bugzilla.suse.com/show_bug.cgi?id=1280166 * https://bugzilla.suse.com/show_bug.cgi?id=1280171 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280193 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280299 * https://bugzilla.suse.com/show_bug.cgi?id=1280303 * https://bugzilla.suse.com/show_bug.cgi?id=1280309 * https://bugzilla.suse.com/show_bug.cgi?id=1280333 * https://bugzilla.suse.com/show_bug.cgi?id=1280334 * https://bugzilla.suse.com/show_bug.cgi?id=1280335 * https://bugzilla.suse.com/show_bug.cgi?id=1280336 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280384 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280464 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280488 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280494 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280525 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280576 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280720 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280761 * https://bugzilla.suse.com/show_bug.cgi?id=1280766 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280901 * https://bugzilla.suse.com/show_bug.cgi?id=1280920 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280969 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281014 * https://bugzilla.suse.com/show_bug.cgi?id=1281025 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281136 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281228 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281597 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281645 * https://bugzilla.suse.com/show_bug.cgi?id=1281660 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281682 * https://bugzilla.suse.com/show_bug.cgi?id=1281683 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281754 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281845 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281956 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282003 * https://bugzilla.suse.com/show_bug.cgi?id=1282013 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282147 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282747 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282975 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283119 * https://bugzilla.suse.com/show_bug.cgi?id=1283130 * https://bugzilla.suse.com/show_bug.cgi?id=1283149 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283166 * https://bugzilla.suse.com/show_bug.cgi?id=1283173 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283203 * https://bugzilla.suse.com/show_bug.cgi?id=1283205 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283296 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283328 * https://bugzilla.suse.com/show_bug.cgi?id=1283450 * https://bugzilla.suse.com/show_bug.cgi?id=1283475 * https://bugzilla.suse.com/show_bug.cgi?id=1283479 * https://bugzilla.suse.com/show_bug.cgi?id=1283489 * https://bugzilla.suse.com/show_bug.cgi?id=1283490 * https://bugzilla.suse.com/show_bug.cgi?id=1283517 * https://bugzilla.suse.com/show_bug.cgi?id=1283739 * https://bugzilla.suse.com/show_bug.cgi?id=1283794 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283880 * https://bugzilla.suse.com/show_bug.cgi?id=1283906 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16852 * https://jira.suse.com/browse/PED-16854 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16906 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:56:40 -0000 Subject: SUSE-SU-2026:24196-1: important: Security update for pacemaker Message-ID: <179252980090.2203.5854048958132338158@816288a415ff> # Security update for pacemaker Announcement ID: SUSE-SU-2026:24196-1 Release Date: 2026-10-09T12:10:03Z Rating: important References: * bsc#1180966 * bsc#1249217 * bsc#1255371 * bsc#1259345 * bsc#1265183 * bsc#1265201 * bsc#1268381 * bsc#1270354 * bsc#1271652 * bsc#1272452 * bsc#1279543 Cross-References: * CVE-2026-10649 CVSS scores: * CVE-2026-10649 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-10649 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves one vulnerability and has 10 fixes can now be installed. ## Description: This update for pacemaker fixes the following issues: Security issue fixed: * CVE-2026-10649: denial of service via integer overflow in remote message decompression (bsc#1268381). Changes for pacemaker: Update to version 3.0.3+20260728.7052efa194: * cts: make cts-scheduler -o/--out-dir default to a temporary directory (bsc#1272452) * spec: Add symlinks for test support files in the pacemaker-cts sub-package (bsc#1272452) * cts: Do not install test support files into /usr at runtime (bsc#1272452) * libcrmcommon: Make pcmk__auto_fencing_watchdog_timeout() static * libcrmcommon: Functionize parsing "fencing-watchdog-timeout" * liblrmd: Check watchdog-based self-fencing device for remote nodes only if "fencing-watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * controller: Check for watchdog-based self-fencing device only if "fencing- watchdog-timeout" is enabled (bsc#1270354, gh#ClusterLabs/pacemaker#4146) * fencer: Avoid use-after-free in debug log (bsc#1279543, gh#ClusterLabs/pacemaker#4172) * fenced: Prevent segfault by not merging with in-flight fencing actions (bsc#1271652, gh#ClusterLabs/pacemaker##4152) * ChangeLog: update for 3.0.3 release * Build: update version information for 3.0.3 * libraries: update shared object versions for 3.0.3 * NLS: update translations before 3.0.3-rc1 * cibadmin: allow altering status section without triggering refresh (gh#ClusterLabs/pacemaker#4147) * tools: Use g_spawn_sync in cibsecret. * tools: Handle UTF-8 parameters in crm_resource. * tools: Handle UTF-8 parameters in cibsecret. * agents: Move pid file management into ClusterMon.in. * libcib: Remove an unnecessary coverity suppression. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix an integer overflow in pcmk__remote_send_xml. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Limit the max size of a remote message. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix integer overflow in remote message code. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * libcrmcommon: Fix checks in localized_remote_header. (CVE-2026-10649, bsc#1268381, rh#2462817, gh#ClusterLabs/pacemaker#4129) * liblrmd: Don't include internal header in lrmd.h * Low: libcrmcommon, tools: Fix NULL dereference in crm_resource.c * pacemakerd: Properly find and track all existing sub-daemons (bsc#1265201, gh#ClusterLabs/pacemaker#4115) * tools: Use the VERSION variable instead of invoking `crm_attribute --version` (bsc#1265183, gh#ClusterLabs/pacemaker#4114) * libcib: Handle cib_xpath_address for an XPath query for an attribute (gh#ClusterLabs/pacemaker#4108) * libcib: Prevent based or cibadmin from crashing when handling an XPath query for an attribute (bsc#1249217, gh#ClusterLabs/pacemaker#4108) * libcrmcommon: Deprecate PCMK_dh_max_bits. * libcib: Full-CIB replace op no longer segfaults with cib_xpath * libpe_status: Avoid leaking a pcmk_resource_t's xml/orig_xml * Revert "API: libraries: Update version numbers in so names" * ChangeLog: update for 3.0.2-rc1 release * tools: Avoid memory leak in crm_resource --clear * libpacemaker, tools: Avoid mem leak in crm_simulate/pcmk_simulate() * libcib: Avoid memory leak when processing CIB upgrade * libpe_status: Use first operations child when expanding template * libpe_status: Improve no resources message in unpack_template() * daemons: Only log a message if we're falling back. * update version information for 3.0.2 * libraries: Update version numbers in so names * libraries: update shared object versions for 3.0.2 * NLS: update translations before 3.0.2-rc1 * libcrmcommon: Deprecate anonymous authentication. * libcrmcommon: Deprecate remote-clear-port. * libcib: Add support for PSK authentication for remote CIB ops. * daemons: Add support for PSK authentication for remote CIB ops. * libpacemaker: Fix a memory leak in inject_action. * tools: Free the list at the end of cli_resource_print_operations. * tools: Fix memory leaks when printing crm_verify warnings/errors. * libpe: If pe__clone_default exits early, free the lists. * libpacemaker: Fix a segfault in order_resource_actions_after. * libcrmcommon: Properly return errno from pcmk__bare_output_new. * libpe: Free elements of rsc->priv->ticket_constraints... * libpacemaker: If process_rsc_history exits early, free the list. * daemons,libcib: Fix memory leaks in IPC code. * libservices: Deal with fgets errors in services__get_lsb_metadata. * libpacemaker: Check that instance is not NULL. * libcrmcommon: Avoid overflow when negating INT_MIN * libcrmcommon: Avoid overflow in crm_time_add_months() * libcib: Explicitly handle receiving a NACK from based. * libcib: Explicitly handle receiving a NACK from fenced. * daemons: Don't NACK an invalid remote message. * libcrmcommon: Don't log on error in pcmk__ipc_send_iov. * daemons: Don't return a NACK if execd gets an unknown message. * liblrmd: Explicitly handle receiving a NACK from execd. * liblrmd: Fix log messages in remote_proxy_cb. * daemons: Delay creating an xmlNode in handle_register_request. * libcrmcommon: Ignore empty time spec * tools: Don't wait on certain "pending" monitor actions. (gh#ClusterLabs/pacemaker#4073) * libcrmcommon: Create a log file if it doesn't exist. * fencer: Disable watchdog-based self-fencing if "fencing-watchdog-timeout" is unset (gh#ClusterLabs/pacemaker#4067) * fencer: Make the deprecated "stonith-watchdog-timeout" option work again (gh#ClusterLabs/pacemaker#4068) * libcrmcommon: Move deprecatd PCMK_OPT_STONITH_TIMEOUT back to options.h * pacemakerd: Correctly detect ping requests from sbd (gh#ClusterLabs/pacemaker#4066) * libcrmcommon: Improve message for qb_log_file_open() fail * libcrmcommon: Improve pcmk__add_logfile() message for fopen() fail * libcrmcommon: More specific error for set_logfile_permissions() * libcrmcommon: Improve validation of PCMK_logfile_mode * liblrmd: Don't assert if queue_time is < 0. * based: Don't log specially for PCMK__XA_CIB_UPDATE * controller: Don't treat patchset-apply errors as OK * libcrmcommon: xml_apply_patchset doesn't return diff_resync err * libcib: Don't convert -pcmk_err_diff_resync to pcmk_ok * libcrmcommon: Handle NULL PCMK_XA_FORMAT and PCMK_XA_DIGEST * libcib, tools: Empty CIB contains admin_epoch before epoch * daemons: Fix user/group checking in based. * libcrmcommon: Fix a glib logging build error. * libcrmcommon: Don't delete unchanged attributes when applying patch * libcrmcommon: Fix potential use-after-free and double-free (gh#ClusterLabs/pacemaker#4044) * executor: Fix the typos in the logs. * libcrmcommon: Set config warnings on mismatched ACL perm specs * libcrmcommon: xml_acl_filtered_copy() returns false for NULL source (gh#ClusterLabs/pacemaker#4039) * libcrmcommon: Make parse_acl_entry() non-recursive * libcrmcommon: Set config warnings and errors for acl_permission * libcib: Log correct error message in replace_cib() * libcib: Fix setting origin attributes in CIB updates (gh#ClusterLabs/pacemaker#4028) * tools: Drop crm_attribute --inhibit-policy-engine/-i option * libcrmcommon: Fix memory leak in pcmk__read_series_sequence() (gh#ClusterLabs/pacemaker#4032) * liblrmd: Check that pcmk__init_tls doesn't set native->tls to NULL. * tools: Drop crm_attribute --attr-value/--delete-attr options * tools: Drop crm_attribute --attr-id option * based: Drop unhelpful trace messages * based: Improve a log message for IPC call options * libcib: {add,del}_notify_callback support only cib_diff_notify * based: Return correct code from write_cib_async() * daemons: Use crm_ipc_client_response in lrmd_remote_client_msg. * daemons: Set ipc_flags in lrmd_remote_client_msg to 0. * daemons: Clean up XML memory in IPC dispatch functions. * daemons: Fix a segfault displaying fencer metadata. * based: Drop redundant messages from based_diff_notify() * build: Handle CMocka deprecations * various: Always NULL-check return value of pcmk__find_client() * libcrmcommon: Improve messages in child_kill_helper() * tools: Free memory in crm_resource.c:handle_metadata() * pacemakerd: Use g_str_has_prefix() in handle_ping_request() * libpacemaker: Correctly check node types in pcmk__list_nodes() * pacemakerd: Match correctly in PCMK_{valgrind,callgrind}_enabled * libcrmcommon: Match correctly in PCMK_debug, stderr, blackbox * spec: Requires libxml2-tools since DLM controld RA requires xmllint (bsc#1259345) * daemons: Fix a typo if no existing attrd is found. * daemons: Call pcmk_cluster_disconnect at the end of fenced. * libcrmcommon: Fix underflow in crm_time_add_days() * libcrmcommon: Avoid integer overflow in seconds_to_hms() * spec: do not treat fillup templates as configuration files * build: install the default logrotate config into /usr/etc/logrotate.d * build: create directories in /var via tmpfiles.d * build: create hacluster user and haclient group via sysusers.d * agents: Deprecate allow_stonith_disabled param for controld RA * agents: New allow_fencing_disabled param for controld RA * agents: Use case-insensitive property matching in controld RA * schemas: Deprecate stonith-timeout-ms in crm_mon output * schemas: Deprecate stonith-enabled in crm_mon output * various: New fencing-timeout-ms in crm_mon/pcmk_status output * schemas: New fencing-timeout-ms attribute in crm_mon schema * various: New fencing-enabled in crm_mon/pcmk_status output * schemas: New fencing-enabled attribute in crm_mon schema * tools: cibadmin --xpath --delete-all deletes all matches again * various: Use const for a few string pointer variables * cts: Respect cts-lab --nic option if specified for IPv4 (gh#ClusterLabs/pacemaker#3986) * cts: cts-lab --nic option defaults to eth0 only for an IPv6 link local address (gh#ClusterLabs/pacemaker#3986) * controller: Ask attribute manager to purge fenced nodes' attributes * controller: Don't purge transient attributes on node loss (gh#ClusterLabs/pacemaker#3991) * controller: Allow purging node attrs without cache removal * controller: don't need to erase node attributes for remote nodes * pacemaker-attrd: Drop "requesting shutdown" code * pacemaker-attrd: Wipe CIB along with memory (gh#ClusterLabs/pacemaker#3991) * libcrmservice: Correctly check the return value of stat. * fencer: Improve validation of pcmk_host_map * fencer: Drop support for escaped characters in pcmk_host_map * fencer: Drop unhelpful message from build_port_aliases() * fencer: Fix ISO 8601 interval parsing in pcmk_delay_base * daemons: When checking for duplicate messages, we might be prepending. * daemons: Don't add repeated I_PE_CALC messages to the fsa queue. * scheduler: promoted state with promoted state with attribute * fencer: Log an error for empty pcmk_delay_base mapping key * fencer: Fix a format string * libcrmservice: List only the requested directory contents * build, libcrmservice: initdir must be a single directory * libcrmservice: Fix memory leaks when listing directory contents * cts: Add cts-lab --nic option used for generated IP address resources (gh#ClusterLabs/pacemaker#3982) * libcrmcommon: Loop on EAGAIN in mainloop_gio_callback. * daemons: Get rid of some logged warnings in execd. * libcrmcommon: Bump feature set to 3.20.5 * libcrmcommon: Deprecate stop-removed-resources cluster property * libcrmcommon: Deprecate cancel-removed-actions cluster property * libpe_status: Warn if concurrent-fencing is false * libcrmcommon: Deprecate enable-startup-probes cluster property * libcrmcommon: Rename stop-removed-actions to cancel-removed-actions * libcrmcommon: Deprecate cluster-ipc-limit cluster option * cts-cli: Escape special characters in the path for a pattern (gh#ClusterLabs/pacemaker#3971) * tools: Handle large timeouts correctly in crm_resource --wait * controller: NULL-check lrm_state before dereferencing it * tools: cibsecret should work with CIB_file set. * controller: Avoid "stonith" in log messages * tools: Use "fencing" in stonith_admin/crm_resource * libpe_status: Use "fencing" instead of "STONITH" in some logs * libcrmcommon: New "fencing-reaction" cluster property * libcrmcommon: New "fencing-watchdog-timeout" cluster property * libcrmcommon: New "fencing-timeout" cluster property * libcrmcommon: New "fencing-max-attempts" cluster property * libcrmcommon: New "fencing-action" cluster property * libcrmcommon: New "fencing-enabled" cluster property * libcrmcommon: Update documentation for cluster-ipc-limit. * libcrmcommon: Be more lenient in evicting IPC clients. * tools: Deprecate iso8601 command line tool * libcrmcommon: Show deprecated option aliases in outputs * libcrmcommon: Parse iso8601 strings according to spec. * fencer: Prevent unsigned int overflow in get_action_timeout() * libcrmcommon: Fix integer overflow of alert timeouts * libcrmcommon: Ensure stonith watchdog timeout is in long range * controller, fencer: Ignore negative/unparsable pcmk_monitor_timeout * cts: Drop cts script * tools: Drop crm_report -T/--cts and --cts-log options * schemas: Deprecate "orphaned" attribute * schemas: resource XML element has new "removed" attribute * schemas: Deprecate "orphan" attribute in crm_mon and crm_simulate * schemas: resource_history XML element has new "removed" attribute * libcrmcommon: Fix a segfault in internal_ipc_get_reply. (bsc#1255371, gh#ClusterLabs/pacemaker#3949) * libcrmcommon: New "stop-removed-resources" cluster property * libcrmcommon: New "stop-removed-actions" cluster property * sysconfig: Remove --leak-check=full from default VALGRIND_OPTS. * tools: Hide crm_mon --as-xml option * crm_mon: Deprecate --pid-file/-p option * tools: Fix CIB validation in crm_mon.c * libcib, libcrmcommon: Improve a couple of log messages * libcrmcommon: pcmk__quote_cmdline() returns valid shell string * libcrmcommon: Bump feature set to 3.20.4 * schemas: Add a schema for cibadmin * tools: Use formatted output in cibadmin * tools: Formatted output for cibadmin --show-access --query * tools: Formatted output for cibadmin --node-path * tools: Basic cibadmin XML formatted output * tools: Formatted output for cibadmin --empty * tools: Formatted output for cibadmin --md5-sum{,-versioned} * tools: Deprecate cibadmin -e/--node-path option * libcrmcommon: bump feature set to 3.20.3 * schemas: Add a schema for cibsecret. * libcrmcommon: Return a value for md5sum of empty input. * tools: Remove the shell version of cibsecret. * tools: Improve some cibadmin error messages * tools: cibadmin renders ACLs only when output is cib element * tools: cibadmin now errors if unable to compute md5 sum * libcib, tools: Resolve cibadmin TODO re: ACL rendering and input * controller: Avoid crash due to GSource double-free * tools: Deprecate cibadmin -N/--node option * tools: Drop "Digest: " from cibadmin --md5-sum stderr * tools: cibadmin ignores --node-path for non-XPath-query command * tools: Change exit codes for failure to create cib_t object * libcib: Fix cib__signon_retry() return code * tools: Deprecate cibadmin --show-access as non-privileged user * tools: Don't require --force for non-privileged cibadmin ACLs * tools: Default cibadmin command is now --query * tools: Deprecate current input source precedence in cibadmin * tools: Drop cibadmin --extended-version/-! option * libcrmcommon: Bump feature set to 3.20.2 * schemas: Add a schema for crm_diff * tools: Use formatted output in crm_diff.c * libcrmcommon: Standardize remote environment variable parsing * libcrmcommon: Allow empty string values in pcmk__scan_nvpair() * libcrmcommon: Keep trailing newlines in pcmk__scan_nvpair() * fencer: Fix fence delay range off-by-one * daemons: Return CRM_EX_PROTOCOL when ACKing an unknown request. * daemons: Correct result error string on unknown IPC messages. * daemons: Add a return to do_pe_invoke_callback. * tools: Deprecate crm_diff --stdin * tools: Improve error handling in crm_diff.c * tools: Be stricter about crm_diff --cib/--no-version * libcrmcommon: Don't require version info when applying CIB patches * agents: Error check calling attrd_updater in HealthSMART. * agents: Error check calling attrd_updater in HealthIOWait. * agents: Error out if CPU I/O wait time isn't available. * agents: Error check calling attrd_updater in HealthCPU. * agents: Error out if CPU idleness isn't available. * daemons: Don't log the unresponsive message for a daemon we killed * controller: Avoid blocking wait in controller for CIB re-request * cts: Remove --valgrind-tests * cts: Leave valgrind results around if they're not empty. * NLS: update translations before 3.0.1-rc1 * libpacemaker: Prevent CIB growth during crm_simulate --profile * daemons: Fix a toctou bug when fetching additional schemas. * Address coverity issues. * Address certain clang static analysis errors. * libs: Fix cppcheck warnings. * libcrmcommon: bump feature set to 3.20.1 * scheduler: Require a cluster option for old remote fencing behavior. * scheduler: Don't always fence online remote nodes. * daemons: Convert schedulerd to support multipart IPC messages. * daemons: Convert attrd to support multipart IPC messages. * daemons: Convert pacemakerd to support multipart IPC messages. * daemons: Convert execd to support multipart IPC messages. * daemons: Convert fenced to support multipart IPC messages. * daemons: Convert controld to support multipart IPC messages. * daemons: Convert based to support multipart IPC messages. * libcrmcommon: Retry on EAGAIN in crm_ipcs_flush_events. * libcrmcommon: All parts of a multipart event should have the same ID * libcrmcommon: Don't immediately overwrite request ID. * libcrmcommon: Check the client buffer in crm_ipc_buffer. * libcrmcommon: Handle sending multi-part IPC server events. * libcrmcommon: crm_ipc_read can receive large IPC messages. * libcrmcommon: Elements should never match if IDs differ * libcrmcommon: Consistently free iov on error. * libcrmcommon: Always free temp node in mark_child_deleted() * libcrmcommon: Fix XML matching when marking changes * fencer: Don't remove device if child is deleted * controller: Populate nodes from peer cache if can't from cluster * libcib: Don't match element based on XPath matching an attribute * tools: Use correct error code for command lookup failure * tools: Dry-run crm_resource --fail if CIB_file is set * libcrmcommon: Sort schema transformations on non-glibc systems * libcrmcommon: Ensure schema transform numbers are in valid range * libcrmcommon: Match literal dots in schema transform filter * spec: Provides user(hacluster) and group(haclient) * libcrmservice: Fix overrides for systemd resources * libcrmservice: Fail systemd rsc start if create override fails * Build: Run cts-cli verbosely. * controller: improve resource action execution logs * controller: improve start-up/exit messages * controller: drop dot file logs * controller: simplify join finalization messages * pacemaker-based: improve a few messages * pacemaker-based: improve exit messages * pacemaker-based: improve messages when reading CIB from disk * libpacemaker: Reset scheduler object in pcmk_simulate() * libpe_status: Make cluster_status() idempotent * tools: Fix overflow in crm_simulate --repeat * libpacemaker: Handle scandir() error in pcmk__profile_dir() * libpacemaker: Fix mem leak in pcmk__profile_dir() * tools: Avoid crash in crm_simulate --profile * Makefile: drop asciidoc references * crm_diff: Replace variable name * Drop deprecated '\--sync-call' option from cibadmin * Drop deprecated '-l/--local' option from cibadmin in multiple places * raise minimum GnuTLS dependency to 3.4.6 * sysconfig: document when logs may show sensitive info * pacemaker-attrd: reduce log spam at shutdown * executor: avoid misleading log when cancelling a recurring monitor * scheduler: improve restart-needed log * scheduler: don't show node capacity for bundle nodes * scheduler: clarify no-quorum effects * libcrmcommon: improve flag set/clear messages * libcrmcommon: improve message for unsupported XPath match * libstonithd: improve action re-attempt message * libcib: Don't send CRM_OP_REGISTER from cib_remote client * tools: mention potential issues with crm_resource --restart * tools: indicate crm_resource --interval can take units * tools: clarify that crm_mon updates are automatic when interactive * agents: Replace the egrep command with the EGREP definition in ping RA * libcrmcluster: fix format typos * doc: drop Inkscape dependency * tools: validate stonith_admin --timeout value * libpacemaker: set fail-count to INFINITY for fatal failures * libpacemaker: add PCMK__XA_FAILED_START_OFFSET and PCMK__XA_FAILED_STOP_OFFSET * tools: Deprecate cibadmin --sync-call * OCF: controld.in: Remove gfs_controld command as it's already obsoleted * xml: Warn about post-transform behavior changes for ACLs with xpath * sysconfig: Document using certificates for remote nodes. * sysconfig: Explain permissions needed on TLS-related files. * libcrmcluster: restore CPG header size compatibility * libcrmcluster: improve messages in pcmk__cpg_message_data() * liblrmd: Enable TLS support for Pacemaker Remote clients. * daemons: Enable TLS support for Pacemaker Remote nodes. * libcrmcommon: Set *tls = NULL in a few more locations. * libcib: Enable TLS certs for remote CIB operations. * libs: Log if a TLS certificate is close to expiration. * libcrmcommon: If the server supports certs, require them... * daemons: Set up X509 auth in based if enabled. * sysconfig: Add env settings needed for X509 authentication. * libcrmcluster: don't assert for CPG decompression error * libcrmcluster: avoid redundant log for invalid CPG messages * libcrmcluster: initialize from in pcmk__cpg_message_data() * scheduler: avoid memory leak in bundles * xml: Preserve ACL reference behavior for replaced constraints * xml: Ensure ACL permissions are valid after XSL transformations * xml: Warn if schema transformation drops remove-after-stop property * xml: Warn if schema transformation drops moon phase * xml: Info if schema transformation drops empty groups or clones * xml: Warn if schema transformation drops colocation/order lifetimes * xml: Warn if schema transformation drops can_fail or... * xml: Warn if schema transformation drops restart-type meta-attr * xml: Warn if schema transformation drops rkt bundles * xml: Warn if schema transformation drops nagios/upstart resources * log: Allow CIB upgrade messages to start with W, I, D * various: clean up library memory at child exit * pacemaker-remoted: improve exit codes for schema failures * controller: avoid memory leak when updating join phase * scheduler: avoid memory leak when freeing node copies * libcrmcommon: drop unhelpful trace message ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1882 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-devel-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-libs-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-debuginfo-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-debugsource-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cli-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-remote-3.0.3+20260728.7052efa194-160000.1.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (noarch) * python3-pacemaker-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-cts-3.0.3+20260728.7052efa194-160000.1.1 * pacemaker-schemas-3.0.3+20260728.7052efa194-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-10649.html * https://bugzilla.suse.com/show_bug.cgi?id=1180966 * https://bugzilla.suse.com/show_bug.cgi?id=1249217 * https://bugzilla.suse.com/show_bug.cgi?id=1255371 * https://bugzilla.suse.com/show_bug.cgi?id=1259345 * https://bugzilla.suse.com/show_bug.cgi?id=1265183 * https://bugzilla.suse.com/show_bug.cgi?id=1265201 * https://bugzilla.suse.com/show_bug.cgi?id=1268381 * https://bugzilla.suse.com/show_bug.cgi?id=1270354 * https://bugzilla.suse.com/show_bug.cgi?id=1271652 * https://bugzilla.suse.com/show_bug.cgi?id=1272452 * https://bugzilla.suse.com/show_bug.cgi?id=1279543 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:56:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:56:56 -0000 Subject: SUSE-SU-2026:24195-1: important: Security update for hawk2 Message-ID: <179252981603.2203.15204332042413438529@816288a415ff> # Security update for hawk2 Announcement ID: SUSE-SU-2026:24195-1 Release Date: 2026-10-09T10:11:39Z Rating: important References: * bsc#1268996 * bsc#1273348 * bsc#1274860 * bsc#1275019 * bsc#1275179 * bsc#1275183 * bsc#1275188 * bsc#1275200 * bsc#1275213 Cross-References: * CVE-2026-42246 * CVE-2026-66066 * CVE-2026-71847 * CVE-2026-73490 * CVE-2026-73491 * CVE-2026-73492 * CVE-2026-73648 CVSS scores: * CVE-2026-42246 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42246 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42246 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-66066 ( SUSE ): 9.5 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L * CVE-2026-66066 ( SUSE ): 8.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-66066 ( NVD ): 9.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-71847 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-71847 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-71847 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73490 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73490 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73490 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73491 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73491 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73492 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73492 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73492 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-73648 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-73648 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-73648 ( NVD ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves seven vulnerabilities and has two fixes can now be installed. ## Description: This update for hawk2 fixes the following issues: * CVE-2026-42246: net-imap: MITM attacker can cause Net::IMAP#starttls to return successfully, without starting TLS (bsc#1268996). * CVE-2026-66066: unsafe image processing operations on untrusted uploads can allow arbitrary file reading and remote code execution (bsc#1273348). * CVE-2026-71847: json: heap use-after free in JSON::ResumableParser partial_value can lead to crash on truncated duplicate-key streams (bsc#1275213). * CVE-2026-73490: loofah: improper handling of SVG attributes in the HTML5 sanitizer allows bypass of local-reference restrictions (bsc#1275179). * CVE-2026-73491: loofah: improper handling of javascript: URIs can lead to XSS (bsc#1275183). * CVE-2026-73492: loofah: improper handling of javascript: and vbscript: URIs can lead to XSS (bsc#1275188). * CVE-2026-73648: rails-html-sanitizer: cross-site scripting is possible when the sanitizer is configured to allow certain SVG reference elements (bsc#1275200). Changes for hawk2: * Update to version 2.7.2+git.1788518533.7d4dadd6 (bsc#1275019): * Test: give sle15 more time when choosing between sle15 and sle16 * Dev: bump jQuery version to 4.0.0 * Dev: bump jQuery version to 3.5.0 * Dev: bump jQuery version to 2.2.4 * Test: update the e2e test for the change allowing custom parameters * Dev: enable custom Parameters and Meta Attributes (bsc#1274860) * CI/CD: update hawk examiner entry point * Test: enable test_add_clone against hawk-apiserver verion 0.2.1 * Test: fix SyntaxWarning: invalid escape sequence '|' * Test: make the tests compatible against hawk-apiserver ver0.2.0 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1881 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * hawk2-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debugsource-2.7.2+git.1788518533.7d4dadd6-160000.1.1 * hawk2-debuginfo-2.7.2+git.1788518533.7d4dadd6-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42246.html * https://www.suse.com/security/cve/CVE-2026-66066.html * https://www.suse.com/security/cve/CVE-2026-71847.html * https://www.suse.com/security/cve/CVE-2026-73490.html * https://www.suse.com/security/cve/CVE-2026-73491.html * https://www.suse.com/security/cve/CVE-2026-73492.html * https://www.suse.com/security/cve/CVE-2026-73648.html * https://bugzilla.suse.com/show_bug.cgi?id=1268996 * https://bugzilla.suse.com/show_bug.cgi?id=1273348 * https://bugzilla.suse.com/show_bug.cgi?id=1274860 * https://bugzilla.suse.com/show_bug.cgi?id=1275019 * https://bugzilla.suse.com/show_bug.cgi?id=1275179 * https://bugzilla.suse.com/show_bug.cgi?id=1275183 * https://bugzilla.suse.com/show_bug.cgi?id=1275188 * https://bugzilla.suse.com/show_bug.cgi?id=1275200 * https://bugzilla.suse.com/show_bug.cgi?id=1275213 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:06 -0000 Subject: SUSE-SU-2026:4768-1: important: Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Message-ID: <179252982663.2203.180173527048299357@816288a415ff> # Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4768-1 Release Date: 2026-10-20T15:34:43Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4768 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4768 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_163-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-9-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_163-default-9-150500.2.1 * kernel-livepatch-5_14_21-150500_55_163-default-debuginfo-9-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_39-debugsource-9-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:28 -0000 Subject: SUSE-SU-2026:4765-1: moderate: Security update for python-WebOb Message-ID: <179252984838.2203.10648655408831378422@816288a415ff> # Security update for python-WebOb Announcement ID: SUSE-SU-2026:4765-1 Release Date: 2026-10-20T13:53:04Z Rating: moderate References: * bsc#1275917 Cross-References: * CVE-2026-54770 CVSS scores: * CVE-2026-54770 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-54770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-WebOb fixes the following issues: * CVE-2026-54770: an unauthenticated attacker who can influence an application's redirect target can send users to an attacker-controlled host for phishing or OAuth and SSO token theft (bsc#1275917). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4765 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4765 ## Package List: * Basesystem Module 15-SP7 (noarch) * python3-WebOb-1.7.4-150000.3.9.1 * SUSE Package Hub 15 15-SP7 (noarch) * python2-WebOb-1.7.4-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-54770.html * https://bugzilla.suse.com/show_bug.cgi?id=1275917 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:42 -0000 Subject: SUSE-SU-2026:4764-1: moderate: Security update for ntfs-3g_ntfsprogs Message-ID: <179252986227.2203.7084627583570725641@816288a415ff> # Security update for ntfs-3g_ntfsprogs Announcement ID: SUSE-SU-2026:4764-1 Release Date: 2026-10-20T13:51:18Z Rating: moderate References: * bsc#1281756 * bsc#1281757 * bsc#1281758 * bsc#1281759 * bsc#1281760 * bsc#1281761 * bsc#1281762 * bsc#1281763 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has eight security fixes can now be installed. ## Description: This update for ntfs-3g_ntfsprogs fixes the following issues: * Denial-of-service in ntfs_inode_attach_all_extents() (bsc#1281758). * Heap buffer overflow in ntfs_acl_owner() (bsc#1281756). * Heap buffer overflow in ntfs_check_restart_area() (bsc#1281759). * Heap buffer overflow in ntfs_ea_check_wsldev() (bsc#1281760). * Heap buffer overflow in ntfs_external_attr_find() (bsc#1281761). * Heap buffer overflow in ntfs_same_sid() (bsc#1281757). * Heap data corruption in ntfs_mapping_pairs_decompress_i() (bsc#1281762). * Heap out of bounds read/write in ntfs_ie_add_vcn() (bsc#1281763). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4764 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4764 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ntfsprogs-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debugsource-2022.5.17-150000.3.30.1 * libntfs-3g87-debuginfo-2022.5.17-150000.3.30.1 * libntfs-3g87-2022.5.17-150000.3.30.1 * ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g-2022.5.17-150000.3.30.1 * ntfs-3g-debuginfo-2022.5.17-150000.3.30.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ntfs-3g_ntfsprogs-debuginfo-2022.5.17-150000.3.30.1 * ntfs-3g_ntfsprogs-debugsource-2022.5.17-150000.3.30.1 * libntfs-3g-devel-2022.5.17-150000.3.30.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1281756 * https://bugzilla.suse.com/show_bug.cgi?id=1281757 * https://bugzilla.suse.com/show_bug.cgi?id=1281758 * https://bugzilla.suse.com/show_bug.cgi?id=1281759 * https://bugzilla.suse.com/show_bug.cgi?id=1281760 * https://bugzilla.suse.com/show_bug.cgi?id=1281761 * https://bugzilla.suse.com/show_bug.cgi?id=1281762 * https://bugzilla.suse.com/show_bug.cgi?id=1281763 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:47 -0000 Subject: SUSE-SU-2026:4763-1: moderate: Security update for libXpm Message-ID: <179252986768.2203.11130394453497874841@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:4763-1 Release Date: 2026-10-20T13:49:56Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4763 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4763 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4763 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libXpm4-debuginfo-3.5.12-150000.3.13.1 * libXpm-devel-3.5.12-150000.3.13.1 * libXpm4-3.5.12-150000.3.13.1 * libXpm-debugsource-3.5.12-150000.3.13.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libXpm-debugsource-3.5.12-150000.3.13.1 * libXpm-tools-debuginfo-3.5.12-150000.3.13.1 * libXpm-tools-3.5.12-150000.3.13.1 * SUSE Package Hub 15 15-SP7 (x86_64) * libXpm4-32bit-3.5.12-150000.3.13.1 * libXpm4-32bit-debuginfo-3.5.12-150000.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:54 -0000 Subject: SUSE-SU-2026:4762-1: moderate: Security update for openssl-1_0_0 Message-ID: <179252987438.2203.6147142562251651458@816288a415ff> # Security update for openssl-1_0_0 Announcement ID: SUSE-SU-2026:4762-1 Release Date: 2026-10-20T13:49:16Z Rating: moderate References: * bsc#1274774 * bsc#1274795 Cross-References: * CVE-2026-54874 CVSS scores: * CVE-2026-54874 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54874 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for openssl-1_0_0 fixes the following issues: * CVE-2026-54874: Excessive Memory Use Buffering DTLS Records for a Future Epoch (bsc#1274795). Changes for openssl-1_0_0: * Security fixes in August 2026 release (bsc#1274774) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4762 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4762 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libopenssl1_0_0-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-1.0.2p-3.115.1 * openssl-1_0_0-debuginfo-1.0.2p-3.115.1 * openssl-1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-1.0.2p-3.115.1 * openssl-1_0_0-debugsource-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libopenssl1_0_0-32bit-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * openssl-1_0_0-doc-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libopenssl1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-32bit-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-32bit-1.0.2p-3.115.1 * openssl-1_0_0-debuginfo-1.0.2p-3.115.1 * openssl-1_0_0-1.0.2p-3.115.1 * libopenssl1_0_0-debuginfo-1.0.2p-3.115.1 * libopenssl-1_0_0-devel-32bit-1.0.2p-3.115.1 * libopenssl1_0_0-hmac-1.0.2p-3.115.1 * openssl-1_0_0-debugsource-1.0.2p-3.115.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * openssl-1_0_0-doc-1.0.2p-3.115.1 ## References: * https://www.suse.com/security/cve/CVE-2026-54874.html * https://bugzilla.suse.com/show_bug.cgi?id=1274774 * https://bugzilla.suse.com/show_bug.cgi?id=1274795 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:57:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:57:59 -0000 Subject: SUSE-SU-2026:4761-1: moderate: Security update for libXpm Message-ID: <179252987952.2203.16657703962195632948@816288a415ff> # Security update for libXpm Announcement ID: SUSE-SU-2026:4761-1 Release Date: 2026-10-20T13:48:52Z Rating: moderate References: * bsc#1281669 Cross-References: * CVE-2026-94287 CVSS scores: * CVE-2026-94287 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94287 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94287 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for libXpm fixes the following issue: * CVE-2026-94287: denial of service via unsigned underflow in libXpm's write path (bsc#1281669). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4761 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libXpm-devel-3.5.11-6.13.1 * libXpm4-debuginfo-32bit-3.5.11-6.13.1 * libXpm4-32bit-3.5.11-6.13.1 * libXpm4-3.5.11-6.13.1 * libXpm4-debuginfo-3.5.11-6.13.1 * libXpm-debugsource-3.5.11-6.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94287.html * https://bugzilla.suse.com/show_bug.cgi?id=1281669 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 20 20:58:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 20 Oct 2026 20:58:12 -0000 Subject: SUSE-SU-2026:4760-1: important: Security update for busybox Message-ID: <179252989205.2203.936060526462512699@816288a415ff> # Security update for busybox Announcement ID: SUSE-SU-2026:4760-1 Release Date: 2026-10-20T13:48:37Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4760 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * busybox-1.37.0-150700.18.24.1 * busybox-static-1.37.0-150700.18.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 08:30:13 -0000 Subject: SUSE-SU-2026:4776-1: important: Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Message-ID: <179257141315.2859.12018843579124629470@09d8eb4075ed> # Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:4776-1 Release Date: 2026-10-20T18:34:35Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4776 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_323-default-4-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 08:30:31 -0000 Subject: SUSE-SU-2026:4773-1: important: Security update for busybox Message-ID: <179257143158.2859.11340959366198331623@09d8eb4075ed> # Security update for busybox Announcement ID: SUSE-SU-2026:4773-1 Release Date: 2026-10-20T17:58:57Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4773 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4773 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * busybox-1.35.0-10.12.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * busybox-1.35.0-10.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 08:30:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 08:30:53 -0000 Subject: SUSE-SU-2026:4772-1: important: Security update for bind Message-ID: <179257145327.2859.9391690445358529287@09d8eb4075ed> # Security update for bind Announcement ID: SUSE-SU-2026:4772-1 Release Date: 2026-10-20T17:58:11Z Rating: important References: * bsc#1280430 * bsc#1280432 * bsc#1280433 * bsc#1280435 * bsc#1280436 * bsc#1280437 * bsc#1280438 * bsc#1280440 * bsc#1280442 * bsc#1280443 Cross-References: * CVE-2026-19033 * CVE-2026-19662 * CVE-2026-19666 * CVE-2026-19667 * CVE-2026-19668 * CVE-2026-19941 * CVE-2026-75029 * CVE-2026-77119 * CVE-2026-78301 * CVE-2026-80274 CVSS scores: * CVE-2026-19033 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-19033 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19033 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-19662 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19662 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19662 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19666 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19666 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-19667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-19668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-19668 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19668 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-19941 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19941 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-19941 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-75029 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75029 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75029 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77119 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77119 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77119 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78301 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N * CVE-2026-78301 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-78301 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N * CVE-2026-80274 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80274 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for bind fixes the following issues: * CVE-2026-19033: Unauthenticated IXFR deltas are applied to the live zone before TSIG verification (bsc#1280430). * CVE-2026-19662: qpcache NOQNAME proof use-after-free crashes recursive resolver (bsc#1280432). * CVE-2026-19666: Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path (bsc#1280433). * CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dns_ncache_add() (bsc#1280435). * CVE-2026-19668: Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching (bsc#1280436). * CVE-2026-19941: checkwildcard() accepts an out-of-zone NSEC as a wildcard- nonexistence proof (bsc#1280437). * CVE-2026-75029: Message parser retains every identical singleton RDATA, enabling wire-to-work amplification (bsc#1280438). * CVE-2026-77119: NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets (bsc#1280440). * CVE-2026-78301: Out-of-zone database nodes can become authoritative zone cuts (bsc#1280442). * CVE-2026-80274: Validating resolver can abort while caching a mismatched NOQNAME proof (bsc#1280443). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4772 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4772 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4772 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4772 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4772 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4772 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * openSUSE Leap 15.5 (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * bind-debugsource-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * bind-utils-9.16.50-150500.8.46.1 * bind-utils-debuginfo-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * bind-utils-debuginfo-9.16.50-150500.8.46.1 * bind-debuginfo-9.16.50-150500.8.46.1 * bind-debugsource-9.16.50-150500.8.46.1 * bind-utils-9.16.50-150500.8.46.1 * bind-9.16.50-150500.8.46.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * bind-doc-9.16.50-150500.8.46.1 * python3-bind-9.16.50-150500.8.46.1 ## References: * https://www.suse.com/security/cve/CVE-2026-19033.html * https://www.suse.com/security/cve/CVE-2026-19662.html * https://www.suse.com/security/cve/CVE-2026-19666.html * https://www.suse.com/security/cve/CVE-2026-19667.html * https://www.suse.com/security/cve/CVE-2026-19668.html * https://www.suse.com/security/cve/CVE-2026-19941.html * https://www.suse.com/security/cve/CVE-2026-75029.html * https://www.suse.com/security/cve/CVE-2026-77119.html * https://www.suse.com/security/cve/CVE-2026-78301.html * https://www.suse.com/security/cve/CVE-2026-80274.html * https://bugzilla.suse.com/show_bug.cgi?id=1280430 * https://bugzilla.suse.com/show_bug.cgi?id=1280432 * https://bugzilla.suse.com/show_bug.cgi?id=1280433 * https://bugzilla.suse.com/show_bug.cgi?id=1280435 * https://bugzilla.suse.com/show_bug.cgi?id=1280436 * https://bugzilla.suse.com/show_bug.cgi?id=1280437 * https://bugzilla.suse.com/show_bug.cgi?id=1280438 * https://bugzilla.suse.com/show_bug.cgi?id=1280440 * https://bugzilla.suse.com/show_bug.cgi?id=1280442 * https://bugzilla.suse.com/show_bug.cgi?id=1280443 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:30:16 -0000 Subject: SUSE-SU-2026:4785-1: important: Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Message-ID: <179258581638.14165.5692677886615013192@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 44 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4785-1 Release Date: 2026-10-21T04:05:56Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.182 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4785 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4785 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4784 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4784 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-4-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-4-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_235-default-debuginfo-4-150400.2.1 * kernel-livepatch-5_14_21-150400_24_235-default-4-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_58-debugsource-4-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-4-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_44-debugsource-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-debuginfo-4-150500.2.1 * kernel-livepatch-5_14_21-150500_55_182-default-4-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:30:38 -0000 Subject: SUSE-SU-2026:4791-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6) Message-ID: <179258583864.14165.13594091838689436137@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4791-1 Release Date: 2026-10-21T06:34:26Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.78 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4790 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4791 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4782 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4790 SUSE-2026-4791 SUSE-2026-4782 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_17-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-19-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-16-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP6_Update_17-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_15-debugsource-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-debuginfo-19-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_16-debugsource-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-16-150600.2.1 * kernel-livepatch-6_4_0-150600_23_70-default-19-150600.2.1 * kernel-livepatch-6_4_0-150600_23_78-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_73-default-debuginfo-16-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:30:51 -0000 Subject: SUSE-SU-2026:4793-1: important: Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Message-ID: <179258585149.14165.15658148328608617450@c0911b1ee8c1> # Security update for the Linux Kernel (Live Patch 43 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:4793-1 Release Date: 2026-10-21T07:36:16Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.177 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4793 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4789 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4780 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4794 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4788 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4789 SUSE-2026-4780 SUSE-2026-4794 SUSE-2026-4788 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4779 SUSE-SLE- Module-Live-Patching-15-SP5-2026-4781 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4777 SUSE-SLE-Module-Live-Patching-15-SP5-2026-4778 SUSE- SLE-Module-Live-Patching-15-SP5-2026-4786 SUSE-SLE-Module-Live- Patching-15-SP5-2026-4783 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4779 SUSE-2026-4781 SUSE-2026-4777 SUSE-2026-4778 SUSE-2026-4786 SUSE-2026-4783 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_280-default-15-2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_219-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_57-debugsource-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_219-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_53-debugsource-8-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_57-debugsource-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_55-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-debuginfo-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_222-default-debuginfo-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_54-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_214-default-8-150400.2.1 * kernel-livepatch-5_14_21-150400_24_228-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_219-default-debuginfo-7-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-7-150500.2.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_166-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-debuginfo-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-debuginfo-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-debuginfo-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_38-debugsource-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-10-150500.2.1 * kernel-livepatch-5_14_21-150500_55_169-default-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_127-default-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-debuginfo-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_40-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_177-default-5-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_42-debugsource-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_43-debugsource-5-150500.2.1 * kernel-livepatch-5_14_21-150500_55_172-default-7-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_32-debugsource-15-150500.2.1 * kernel-livepatch-5_14_21-150500_55_149-default-debuginfo-10-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_41-debugsource-7-150500.2.1 * kernel-livepatch-5_14_21-150500_55_166-default-7-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:30:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:30:59 -0000 Subject: SUSE-SU-2026:4810-1: moderate: Security update for python-oauthlib Message-ID: <179258585927.14165.4822983960015299655@c0911b1ee8c1> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:4810-1 Release Date: 2026-10-21T08:05:08Z Rating: moderate References: * bsc#1283526 * bsc#1283527 Cross-References: * CVE-2026-49264 * CVE-2026-49265 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49265 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-49265 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-49265 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-oauthlib fixes the following issues: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). * CVE-2026-49265: Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (bsc#1283527). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4810 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4810 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4810 ## Package List: * Public Cloud Module 15-SP4 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 * openSUSE Leap 15.4 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 * Python 3 Module 15-SP7 (noarch) * python311-oauthlib-3.2.2-150400.12.10.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://www.suse.com/security/cve/CVE-2026-49265.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 * https://bugzilla.suse.com/show_bug.cgi?id=1283527 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:31:14 -0000 Subject: SUSE-SU-2026:4809-1: important: Security update for python311 Message-ID: <179258587460.14165.11267651635480010617@c0911b1ee8c1> # Security update for python311 Announcement ID: SUSE-SU-2026:4809-1 Release Date: 2026-10-21T08:04:21Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4809 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4809 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4809 * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4809 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4809 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4809 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4809 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4809 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4809 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4809 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-testsuite-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-testsuite-debuginfo-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (x86_64) * python311-base-32bit-debuginfo-3.11.17-150400.9.105.1 * python311-32bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-32bit-3.11.17-150400.9.105.1 * libpython3_11-1_0-32bit-debuginfo-3.11.17-150400.9.105.1 * libpython3_11-1_0-32bit-3.11.17-150400.9.105.1 * python311-32bit-3.11.17-150400.9.105.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpython3_11-1_0-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-64bit-debuginfo-3.11.17-150400.9.105.1 * python311-base-64bit-3.11.17-150400.9.105.1 * libpython3_11-1_0-64bit-3.11.17-150400.9.105.1 * python311-64bit-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python311-core-debugsource-3.11.17-150400.9.105.1 * python311-debugsource-3.11.17-150400.9.105.1 * python311-tk-debuginfo-3.11.17-150400.9.105.1 * python311-dbm-debuginfo-3.11.17-150400.9.105.1 * python311-doc-3.11.17-150400.9.105.1 * python311-curses-3.11.17-150400.9.105.1 * python311-3.11.17-150400.9.105.1 * libpython3_11-1_0-3.11.17-150400.9.105.1 * libpython3_11-1_0-debuginfo-3.11.17-150400.9.105.1 * python311-base-3.11.17-150400.9.105.1 * python311-curses-debuginfo-3.11.17-150400.9.105.1 * python311-doc-devhelp-3.11.17-150400.9.105.1 * python311-dbm-3.11.17-150400.9.105.1 * python311-tools-3.11.17-150400.9.105.1 * python311-devel-3.11.17-150400.9.105.1 * python311-idle-3.11.17-150400.9.105.1 * python311-tk-3.11.17-150400.9.105.1 * python311-debuginfo-3.11.17-150400.9.105.1 * python311-base-debuginfo-3.11.17-150400.9.105.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:31:21 -0000 Subject: SUSE-SU-2026:4807-1: moderate: Security update for python-oauthlib Message-ID: <179258588132.14165.13736108913707044834@c0911b1ee8c1> # Security update for python-oauthlib Announcement ID: SUSE-SU-2026:4807-1 Release Date: 2026-10-21T08:02:33Z Rating: moderate References: * bsc#1283526 Cross-References: * CVE-2026-49264 CVSS scores: * CVE-2026-49264 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N * CVE-2026-49264 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-49264 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-oauthlib fixes the following issue: * CVE-2026-49264: Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation (bsc#1283526). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4807 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4807 ## Package List: * SUSE Linux Enterprise Micro 5.5 (noarch) * python3-oauthlib-2.0.6-150000.3.9.1 * python2-oauthlib-2.0.6-150000.3.9.1 * Basesystem Module 15-SP7 (noarch) * python3-oauthlib-2.0.6-150000.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-49264.html * https://bugzilla.suse.com/show_bug.cgi?id=1283526 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:31:44 -0000 Subject: SUSE-SU-2026:4806-1: important: Security update for MozillaFirefox Message-ID: <179258590431.14165.3880659655492140042@c0911b1ee8c1> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4806-1 Release Date: 2026-10-21T08:01:45Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service (bsc#1275098). * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service (bsc#1275098). * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption (bsc#1275098). * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption (bsc#1275098). * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks (bsc#1275098). * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption (bsc#1275098). * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service (bsc#1275098). * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service (bsc#1275098). * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption (bsc#1275098). * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c (bsc#1275736). * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service (bsc#1275605). * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash (bsc#1275736). * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks (bsc#1275736). * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption (bsc#1275736). * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters (bsc#1282347). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4806 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4806 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-translations-common-153.5.0-118.16.2 * MozillaFirefox-debuginfo-153.5.0-118.16.2 * MozillaFirefox-debugsource-153.5.0-118.16.2 * MozillaFirefox-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-translations-common-153.5.0-118.16.2 * MozillaFirefox-debuginfo-153.5.0-118.16.2 * MozillaFirefox-debugsource-153.5.0-118.16.2 * MozillaFirefox-153.5.0-118.16.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.5.0-118.16.2 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:31:51 -0000 Subject: SUSE-SU-2026:4805-1: moderate: Security update for perl-DBI Message-ID: <179258591158.14165.18282290659825831077@c0911b1ee8c1> # Security update for perl-DBI Announcement ID: SUSE-SU-2026:4805-1 Release Date: 2026-10-21T08:01:10Z Rating: moderate References: * bsc#1283055 * bsc#1283056 Cross-References: * CVE-2026-88815 * CVE-2026-88816 CVSS scores: * CVE-2026-88815 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88815 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88815 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88816 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88816 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for perl-DBI fixes the following issues: * CVE-2026-88815: numeric value incorrectly treated as strings in `sql_type_cast_svpv` allows for process crash (bsc#1283055). * CVE-2026-88816: numeric value incorrectly treated as strings in `FetchHashKeyName` allows for process crash (bsc#1283056). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4805 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4805 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * perl-DBI-debuginfo-1.647.0-150600.12.26.1 * perl-DBI-1.647.0-150600.12.26.1 * perl-DBI-debugsource-1.647.0-150600.12.26.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-DBI-debuginfo-1.647.0-150600.12.26.1 * perl-DBI-1.647.0-150600.12.26.1 * perl-DBI-debugsource-1.647.0-150600.12.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88815.html * https://www.suse.com/security/cve/CVE-2026-88816.html * https://bugzilla.suse.com/show_bug.cgi?id=1283055 * https://bugzilla.suse.com/show_bug.cgi?id=1283056 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:31:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:31:59 -0000 Subject: SUSE-SU-2026:4804-1: important: Security update for pgvector Message-ID: <179258591965.14165.5749869478274187443@c0911b1ee8c1> # Security update for pgvector Announcement ID: SUSE-SU-2026:4804-1 Release Date: 2026-10-21T08:00:51Z Rating: important References: * bsc#1284129 Cross-References: * CVE-2026-103484 CVSS scores: * CVE-2026-103484 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-103484 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103484 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for pgvector fixes the following issue: * CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129). Changes for pgvector: * Updated to version 0.8.7 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4804 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4804 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4804 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4804 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * postgresql15-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql14-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql14-pgvector-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql15-pgvector-0.8.7-150600.13.12.1 * postgresql14-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql15-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * postgresql16-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-0.8.7-150600.13.12.1 * postgresql18-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql18-pgvector-0.8.7-150600.13.12.1 * postgresql17-pgvector-debuginfo-0.8.7-150600.13.12.1 * postgresql16-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql16-pgvector-debuginfo-0.8.7-150600.13.12.1 * pgvector-devel-0.8.7-150600.13.12.1 * postgresql17-pgvector-debugsource-0.8.7-150600.13.12.1 * postgresql18-pgvector-debugsource-0.8.7-150600.13.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-103484.html * https://bugzilla.suse.com/show_bug.cgi?id=1284129 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:32:05 -0000 Subject: SUSE-SU-2026:4803-1: important: Security update for cups-filters Message-ID: <179258592582.14165.1465410107739313640@c0911b1ee8c1> # Security update for cups-filters Announcement ID: SUSE-SU-2026:4803-1 Release Date: 2026-10-21T08:00:06Z Rating: important References: * bsc#1282291 Cross-References: * CVE-2026-95511 CVSS scores: * CVE-2026-95511 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-95511 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-95511 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cups-filters fixes the following issue: * CVE-2026-95511: `lpadmin` user can escalate privileges to `root` via printers that uses a privileged serial backend (bsc#1282291). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4803 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4803 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4803 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4803 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4803 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4803 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4803 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4803 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4803 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4803 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4803 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cups-filters-1.25.0-150200.3.34.1 * cups-filters-debuginfo-1.25.0-150200.3.34.1 * cups-filters-devel-1.25.0-150200.3.34.1 * cups-filters-debugsource-1.25.0-150200.3.34.1 ## References: * https://www.suse.com/security/cve/CVE-2026-95511.html * https://bugzilla.suse.com/show_bug.cgi?id=1282291 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:32:11 -0000 Subject: SUSE-SU-2026:4802-1: important: Security update for cyrus-sasl Message-ID: <179258593188.14165.11175880739381061695@c0911b1ee8c1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4802-1 Release Date: 2026-10-21T07:58:39Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4802 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4802 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4802 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4802 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4802 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4802 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4802 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4802 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4802 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ntlm-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-scram-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * openSUSE Leap 15.3 (x86_64) * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-otp-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-devel-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.27-150300.4.9.1 * openSUSE Leap 15.3 (aarch64_ilp32) * cyrus-sasl-devel-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.27-150300.4.9.1 * libsasl2-3-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-64bit-2.1.27-150300.4.9.1 * cyrus-sasl-64bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-plain-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-devel-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-2.1.27-150300.4.9.1 * libsasl2-3-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-plain-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gs2-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-devel-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-2.1.27-150300.4.9.1 * cyrus-sasl-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-digestmd5-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-2.1.27-150300.4.9.1 * cyrus-sasl-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-gssapi-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-bdb-2.1.27-150300.4.9.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-scram-2.1.27-150300.4.9.1 * cyrus-sasl-otp-2.1.27-150300.4.9.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-debuginfo-2.1.27-150300.4.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * cyrus-sasl-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-32bit-debuginfo-2.1.27-150300.4.9.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.27-150300.4.9.1 * libsasl2-3-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-digestmd5-32bit-2.1.27-150300.4.9.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.27-150300.4.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:32:19 -0000 Subject: SUSE-SU-2026:4801-1: moderate: Security update for libpng16 Message-ID: <179258593946.14165.14152980287409752692@c0911b1ee8c1> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4801-1 Release Date: 2026-10-21T07:57:25Z Rating: moderate References: * bsc#1283183 * jsc#PED-16190 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for libpng16 fixes the following issues: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59 (jsc#PED-16190): * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4801 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libpng16-compat-devel-1.6.59-15.27.1 * libpng16-debugsource-1.6.59-15.27.1 * libpng16-devel-1.6.59-15.27.1 * libpng16-16-32bit-1.6.59-15.27.1 * libpng16-16-debuginfo-32bit-1.6.59-15.27.1 * libpng16-16-debuginfo-1.6.59-15.27.1 * libpng16-16-1.6.59-15.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 * https://jira.suse.com/browse/PED-16190 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:32:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:32:56 -0000 Subject: SUSE-SU-2026:4799-1: important: Security update for ImageMagick Message-ID: <179258597695.14165.12373548187642160964@c0911b1ee8c1> # Security update for ImageMagick Announcement ID: SUSE-SU-2026:4799-1 Release Date: 2026-10-21T07:57:04Z Rating: important References: * bsc#1268113 * bsc#1268117 * bsc#1281909 * bsc#1281910 * bsc#1281911 * bsc#1281912 * bsc#1284217 * bsc#1284662 * bsc#1284663 * bsc#1284664 * bsc#1284665 * bsc#1284667 * bsc#1284668 * bsc#1284669 * bsc#1284671 * bsc#1284672 * bsc#1284673 * bsc#1284675 * bsc#1284677 * bsc#1284678 * bsc#1284680 * bsc#1284681 * bsc#1284682 * bsc#1284683 * bsc#1285071 Cross-References: * CVE-2026-105083 * CVE-2026-106565 * CVE-2026-106566 * CVE-2026-106567 * CVE-2026-106568 * CVE-2026-106570 * CVE-2026-106571 * CVE-2026-106572 * CVE-2026-106573 * CVE-2026-106574 * CVE-2026-106575 * CVE-2026-106577 * CVE-2026-106578 * CVE-2026-106579 * CVE-2026-106580 * CVE-2026-107208 * CVE-2026-107209 * CVE-2026-107210 * CVE-2026-109259 * CVE-2026-109260 * CVE-2026-109261 * CVE-2026-109262 * CVE-2026-109263 * CVE-2026-109266 * CVE-2026-109268 * CVE-2026-109269 * CVE-2026-109270 * CVE-2026-109273 * CVE-2026-109274 * CVE-2026-109275 * CVE-2026-109276 * CVE-2026-109277 * CVE-2026-109278 * CVE-2026-93586 * CVE-2026-93587 * CVE-2026-93588 * CVE-2026-93589 CVSS scores: * CVE-2026-105083 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-105083 ( SUSE ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105083 ( NVD ): 4.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-105083 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2026-106565 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106565 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106566 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106566 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:N * CVE-2026-106567 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106567 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106568 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106568 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106570 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106571 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106571 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106572 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106572 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106573 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106574 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106574 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106575 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106575 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-106577 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106577 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-106578 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106578 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-106579 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106579 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-106580 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-106580 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-107208 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107208 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107209 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107209 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107210 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107210 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109259 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109259 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109259 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109260 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109260 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109260 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109261 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109261 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109262 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109262 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109263 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109263 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109266 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109266 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-109268 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109268 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109269 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109269 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109270 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109270 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109273 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109273 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109274 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109274 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-109275 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109275 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-109276 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109276 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109277 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109277 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-109278 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109278 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93586 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93586 ( NVD ): 2.1 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93586 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93586 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93587 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93587 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93587 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93587 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93588 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93588 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93588 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93588 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93589 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93589 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93589 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93589 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 37 vulnerabilities can now be installed. ## Description: This update for ImageMagick fixes the following issues: * CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912). * CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of service (bsc#1281909). * CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910). * CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911). * CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something else that is valid xml (bsc#1284217). * CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop (bsc#1284662). * CVE-2026-106566: delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data (bsc#1284663). * CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite loop and DoS (bsc#1284664). * CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop (bsc#1284665). * CVE-2026-106570: an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing a DoS (bsc#1284667). * CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process (bsc#1284668). * CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process (bsc#1284669). * CVE-2026-106573: a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long- running operation (bsc#1284671). * CVE-2026-106574: a client connected to the distributed pixel cache server can send crafted pixel data that triggers a heap buffer overwrite and crash the server (bsc#1284672). * CVE-2026-106575: a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors (bsc#1284673). * CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders (bsc#1284675). * CVE-2026-106578: a crafted image can cause an invalid memory free in the MVG decoder and crash the process (bsc#1284677). * CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read (bsc#1284678). * CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash (bsc#1284680). * CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process (bsc#1284681). * CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause a crash (bsc#1284682). * CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit (bsc#1284683). * CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071). * CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071). * CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071). * CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071). * CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071). * CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071). * CVE-2026-109268: Denial of Service via use-after-free in PDF writer (bsc#1285071). * CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071). * CVE-2026-109270: Denial of Service via memory leak in the -process option (bsc#1285071). * CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071). * CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071). * CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071). * CVE-2026-109277: Security policy bypass via -script operation (bsc#1285071). * CVE-2026-109278: Denial of Service via memory leak in wavelet-denoise operation (bsc#1285071). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4799 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4799 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4799 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4799 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4799 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4799 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4799 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4799 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4799 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4799 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4799 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4799 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-extra-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * ImageMagick-extra-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (x86_64) * libMagick++-7_Q16HDRI5-32bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-32bit-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-32bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-32bit-7.1.0.9-150400.6.122.1 * ImageMagick-devel-32bit-7.1.0.9-150400.6.122.1 * libMagick++-devel-32bit-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libMagick++-7_Q16HDRI5-64bit-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-64bit-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-devel-64bit-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-64bit-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-64bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-64bit-7.1.0.9-150400.6.122.1 * libMagick++-devel-64bit-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-64bit-debuginfo-7.1.0.9-150400.6.122.1 * openSUSE Leap 15.4 (noarch) * ImageMagick-doc-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-devel-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-SUSE-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-7.1.0.9-150400.6.122.1 * libMagick++-devel-7.1.0.9-150400.6.122.1 * perl-PerlMagick-7.1.0.9-150400.6.122.1 * libMagick++-7_Q16HDRI5-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-debuginfo-7.1.0.9-150400.6.122.1 * libMagickWand-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * ImageMagick-7.1.0.9-150400.6.122.1 * perl-PerlMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 * libMagickCore-7_Q16HDRI10-7.1.0.9-150400.6.122.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * ImageMagick-debugsource-7.1.0.9-150400.6.122.1 * ImageMagick-debuginfo-7.1.0.9-150400.6.122.1 * ImageMagick-config-7-upstream-7.1.0.9-150400.6.122.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105083.html * https://www.suse.com/security/cve/CVE-2026-106565.html * https://www.suse.com/security/cve/CVE-2026-106566.html * https://www.suse.com/security/cve/CVE-2026-106567.html * https://www.suse.com/security/cve/CVE-2026-106568.html * https://www.suse.com/security/cve/CVE-2026-106570.html * https://www.suse.com/security/cve/CVE-2026-106571.html * https://www.suse.com/security/cve/CVE-2026-106572.html * https://www.suse.com/security/cve/CVE-2026-106573.html * https://www.suse.com/security/cve/CVE-2026-106574.html * https://www.suse.com/security/cve/CVE-2026-106575.html * https://www.suse.com/security/cve/CVE-2026-106577.html * https://www.suse.com/security/cve/CVE-2026-106578.html * https://www.suse.com/security/cve/CVE-2026-106579.html * https://www.suse.com/security/cve/CVE-2026-106580.html * https://www.suse.com/security/cve/CVE-2026-107208.html * https://www.suse.com/security/cve/CVE-2026-107209.html * https://www.suse.com/security/cve/CVE-2026-107210.html * https://www.suse.com/security/cve/CVE-2026-109259.html * https://www.suse.com/security/cve/CVE-2026-109260.html * https://www.suse.com/security/cve/CVE-2026-109261.html * https://www.suse.com/security/cve/CVE-2026-109262.html * https://www.suse.com/security/cve/CVE-2026-109263.html * https://www.suse.com/security/cve/CVE-2026-109266.html * https://www.suse.com/security/cve/CVE-2026-109268.html * https://www.suse.com/security/cve/CVE-2026-109269.html * https://www.suse.com/security/cve/CVE-2026-109270.html * https://www.suse.com/security/cve/CVE-2026-109273.html * https://www.suse.com/security/cve/CVE-2026-109274.html * https://www.suse.com/security/cve/CVE-2026-109275.html * https://www.suse.com/security/cve/CVE-2026-109276.html * https://www.suse.com/security/cve/CVE-2026-109277.html * https://www.suse.com/security/cve/CVE-2026-109278.html * https://www.suse.com/security/cve/CVE-2026-93586.html * https://www.suse.com/security/cve/CVE-2026-93587.html * https://www.suse.com/security/cve/CVE-2026-93588.html * https://www.suse.com/security/cve/CVE-2026-93589.html * https://bugzilla.suse.com/show_bug.cgi?id=1268113 * https://bugzilla.suse.com/show_bug.cgi?id=1268117 * https://bugzilla.suse.com/show_bug.cgi?id=1281909 * https://bugzilla.suse.com/show_bug.cgi?id=1281910 * https://bugzilla.suse.com/show_bug.cgi?id=1281911 * https://bugzilla.suse.com/show_bug.cgi?id=1281912 * https://bugzilla.suse.com/show_bug.cgi?id=1284217 * https://bugzilla.suse.com/show_bug.cgi?id=1284662 * https://bugzilla.suse.com/show_bug.cgi?id=1284663 * https://bugzilla.suse.com/show_bug.cgi?id=1284664 * https://bugzilla.suse.com/show_bug.cgi?id=1284665 * https://bugzilla.suse.com/show_bug.cgi?id=1284667 * https://bugzilla.suse.com/show_bug.cgi?id=1284668 * https://bugzilla.suse.com/show_bug.cgi?id=1284669 * https://bugzilla.suse.com/show_bug.cgi?id=1284671 * https://bugzilla.suse.com/show_bug.cgi?id=1284672 * https://bugzilla.suse.com/show_bug.cgi?id=1284673 * https://bugzilla.suse.com/show_bug.cgi?id=1284675 * https://bugzilla.suse.com/show_bug.cgi?id=1284677 * https://bugzilla.suse.com/show_bug.cgi?id=1284678 * https://bugzilla.suse.com/show_bug.cgi?id=1284680 * https://bugzilla.suse.com/show_bug.cgi?id=1284681 * https://bugzilla.suse.com/show_bug.cgi?id=1284682 * https://bugzilla.suse.com/show_bug.cgi?id=1284683 * https://bugzilla.suse.com/show_bug.cgi?id=1285071 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:33:10 -0000 Subject: SUSE-SU-2026:4798-1: important: Security update for busybox Message-ID: <179258599077.14165.13787142738043586028@c0911b1ee8c1> # Security update for busybox Announcement ID: SUSE-SU-2026:4798-1 Release Date: 2026-10-21T07:55:39Z Rating: important References: * bsc#1282550 * bsc#1282551 * bsc#1282552 * bsc#1282568 * bsc#1282575 * bsc#1282576 * bsc#1282653 Cross-References: * CVE-2026-88830 * CVE-2026-88831 * CVE-2026-88832 * CVE-2026-88835 * CVE-2026-88837 * CVE-2026-88839 * CVE-2026-88841 CVSS scores: * CVE-2026-88830 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88830 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-88831 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-88832 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88832 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88832 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88835 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88835 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88835 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-88837 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-88837 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88837 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-88839 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88839 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88839 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-88841 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-88841 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves seven vulnerabilities can now be installed. ## Description: This update for busybox fixes the following issues: * CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted `ClientKeyExchange` message (bsc#1282575). * CVE-2026-88831: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths (bsc#1282550). * CVE-2026-88832: romfs volume ID parsing uses unbounded `strlen` on attacker- controlled metadata and allows for a heap buffer overflow when crafted filesystem images are processed (bsc#1282576). * CVE-2026-88835: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages (bsc#1282551). * CVE-2026-88837: httpd misidentifies yescrypt password hashes as plaintext (bsc#1282552). * CVE-2026-88839: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint (bsc#1282568). * CVE-2026-88841: OOB read and silent memory corruption of the status file due to `write_status_file()` failing to reset the `field_start` cursor between package stanzas (bsc#1282653). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4798 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4798 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4798 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4798 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4798 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 * busybox-testsuite-1.35.0-150400.3.23.1 * openSUSE Leap 15.4 (noarch) * busybox-grep-1.35.0-150400.4.11.1 * busybox-time-1.35.0-150400.4.11.1 * busybox-iproute2-1.35.0-150400.4.11.1 * busybox-cpio-1.35.0-150400.4.11.1 * busybox-kbd-1.35.0-150400.4.11.1 * busybox-whois-1.35.0-150400.4.11.1 * busybox-findutils-1.35.0-150400.4.11.1 * busybox-links-1.35.0-150400.4.11.1 * busybox-sendmail-1.35.0-150400.4.11.1 * busybox-bzip2-1.35.0-150400.4.11.1 * busybox-selinux-tools-1.35.0-150400.4.11.1 * busybox-vi-1.35.0-150400.4.11.1 * busybox-less-1.35.0-150400.4.11.1 * busybox-syslogd-1.35.0-150400.4.11.1 * busybox-coreutils-1.35.0-150400.4.11.1 * busybox-dos2unix-1.35.0-150400.4.11.1 * busybox-man-1.35.0-150400.4.11.1 * busybox-tar-1.35.0-150400.4.11.1 * busybox-patch-1.35.0-150400.4.11.1 * busybox-which-1.35.0-150400.4.11.1 * busybox-telnet-1.35.0-150400.4.11.1 * busybox-netcat-1.35.0-150400.4.11.1 * busybox-vlan-1.35.0-150400.4.11.1 * busybox-wget-1.35.0-150400.4.11.1 * busybox-ncurses-utils-1.35.0-150400.4.11.1 * busybox-diffutils-1.35.0-150400.4.11.1 * busybox-util-linux-1.35.0-150400.4.11.1 * busybox-procps-1.35.0-150400.4.11.1 * busybox-policycoreutils-1.35.0-150400.4.11.1 * busybox-bc-1.35.0-150400.4.11.1 * busybox-sysvinit-tools-1.35.0-150400.4.11.1 * busybox-gzip-1.35.0-150400.4.11.1 * busybox-hostname-1.35.0-150400.4.11.1 * busybox-net-tools-1.35.0-150400.4.11.1 * busybox-attr-1.35.0-150400.4.11.1 * busybox-misc-1.35.0-150400.4.11.1 * busybox-sharutils-1.35.0-150400.4.11.1 * busybox-kmod-1.35.0-150400.4.11.1 * busybox-psmisc-1.35.0-150400.4.11.1 * busybox-bind-utils-1.35.0-150400.4.11.1 * busybox-tunctl-1.35.0-150400.4.11.1 * busybox-xz-1.35.0-150400.4.11.1 * busybox-sed-1.35.0-150400.4.11.1 * busybox-ed-1.35.0-150400.4.11.1 * busybox-gawk-1.35.0-150400.4.11.1 * busybox-sh-1.35.0-150400.4.11.1 * busybox-tftp-1.35.0-150400.4.11.1 * busybox-iputils-1.35.0-150400.4.11.1 * busybox-unzip-1.35.0-150400.4.11.1 * busybox-adduser-1.35.0-150400.4.11.1 * busybox-traceroute-1.35.0-150400.4.11.1 * openSUSE Leap 15.4 (aarch64 i586 x86_64) * busybox-warewulf3-1.35.0-150400.3.23.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * busybox-static-1.35.0-150400.3.23.1 * busybox-1.35.0-150400.3.23.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88830.html * https://www.suse.com/security/cve/CVE-2026-88831.html * https://www.suse.com/security/cve/CVE-2026-88832.html * https://www.suse.com/security/cve/CVE-2026-88835.html * https://www.suse.com/security/cve/CVE-2026-88837.html * https://www.suse.com/security/cve/CVE-2026-88839.html * https://www.suse.com/security/cve/CVE-2026-88841.html * https://bugzilla.suse.com/show_bug.cgi?id=1282550 * https://bugzilla.suse.com/show_bug.cgi?id=1282551 * https://bugzilla.suse.com/show_bug.cgi?id=1282552 * https://bugzilla.suse.com/show_bug.cgi?id=1282568 * https://bugzilla.suse.com/show_bug.cgi?id=1282575 * https://bugzilla.suse.com/show_bug.cgi?id=1282576 * https://bugzilla.suse.com/show_bug.cgi?id=1282653 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:33:33 -0000 Subject: SUSE-SU-2026:4797-1: important: Security update for bouncycastle Message-ID: <179258601360.14165.14790193118623535031@c0911b1ee8c1> # Security update for bouncycastle Announcement ID: SUSE-SU-2026:4797-1 Release Date: 2026-10-21T07:55:00Z Rating: important References: * bsc#1284065 * bsc#1284073 * bsc#1284075 * bsc#1284165 * bsc#1284205 * bsc#1284212 * bsc#1284213 * bsc#1284215 * bsc#1284218 * bsc#1284219 * bsc#1284220 * bsc#1284221 * bsc#1284222 * bsc#1284224 Cross-References: * CVE-2026-17507 * CVE-2026-17508 * CVE-2026-18036 * CVE-2026-18040 * CVE-2026-71885 * CVE-2026-71886 * CVE-2026-71887 * CVE-2026-71888 * CVE-2026-71889 * CVE-2026-71890 * CVE-2026-71891 * CVE-2026-71892 * CVE-2026-85515 * CVE-2026-97873 CVSS scores: * CVE-2026-17507 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-17507 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-17507 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-17507 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-17508 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-17508 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-17508 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18036 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18036 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18036 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-18040 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-18040 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18040 ( NVD ): 5.9 CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71885 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-71885 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-71885 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71886 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71886 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-71886 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71887 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71887 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71887 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71888 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71888 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71888 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71889 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71889 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71889 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71890 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71890 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71890 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71891 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-71891 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-71891 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-71892 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-71892 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-71892 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-85515 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-85515 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-85515 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber * CVE-2026-97873 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97873 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-97873 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 14 vulnerabilities can now be installed. ## Description: This update for bouncycastle fixes the following issues: * CVE-2026-17507: negative signed leaf_index values from unsigned wire encodings can cause heap exhaustion (bsc#1284075). * CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion (bsc#1284073). * CVE-2026-18036: variable-time modulo and division operations in NTRU implementation can allow timing side-channel attacks (bsc#1284065). * CVE-2026-18040: table lookups and variable-time duplicate scanning in HQC can cause cache side-channel leaks (bsc#1284205). * CVE-2026-71885: unbound X.509 certificates in MLS LeafNode verification can cause identity impersonation and group message interception (bsc#1284165). * CVE-2026-71886: unvalidated CERTIFY_OTHER flags in OpenPGP subkeys can cause unauthorized trust delegations and identity spoofing (bsc#1284212). * CVE-2026-71887: missing primary key back-signature validation on subkeys can cause signature misattribution and trust context spoofing (bsc#1284213). * CVE-2026-71888: disagreement between digestAlgorithm and authAttrs in CMS parsing can cause unauthenticated attribute injection (bsc#1284215). * CVE-2026-71889: skipped leaf certificate evaluation in checkNameConstraints can cause X.509 name constraint bypasses (bsc#1284218). * CVE-2026-71890: unbounded Remove proposals in external MLS commits can cause arbitrary group member eviction and session takeover (bsc#1284219). * CVE-2026-71891: forged ECPoint curves in BLS12-381 key validation can cause aggregate signature verification bypasses (bsc#1284220). * CVE-2026-71892: type mismatch in CMS key-transport validation can cause key- size enforcement bypasses for HKDF-derived content keys (bsc#1284221). * CVE-2026-85515: laundered EOF exceptions in OpenPGP message stream processing can cause unregistered truncation errors and integrity check bypasses (bsc#1284222). * CVE-2026-97873: unbounded iteration counts in legacy PBES1 and PKCS#12 PBE implementations can cause resource exhaustion (bsc#1284224). Changes for bouncycastle: * Updated to version 1.86. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4797 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4797 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4797 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4797 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4797 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4797 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4797 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4797 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4797 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4797 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4797 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * Development Tools Module 15-SP7 (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * bouncycastle-util-1.86-150200.3.41.1 * bouncycastle-pg-1.86-150200.3.41.1 * bouncycastle-1.86-150200.3.41.1 * bouncycastle-pkix-1.86-150200.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-17507.html * https://www.suse.com/security/cve/CVE-2026-17508.html * https://www.suse.com/security/cve/CVE-2026-18036.html * https://www.suse.com/security/cve/CVE-2026-18040.html * https://www.suse.com/security/cve/CVE-2026-71885.html * https://www.suse.com/security/cve/CVE-2026-71886.html * https://www.suse.com/security/cve/CVE-2026-71887.html * https://www.suse.com/security/cve/CVE-2026-71888.html * https://www.suse.com/security/cve/CVE-2026-71889.html * https://www.suse.com/security/cve/CVE-2026-71890.html * https://www.suse.com/security/cve/CVE-2026-71891.html * https://www.suse.com/security/cve/CVE-2026-71892.html * https://www.suse.com/security/cve/CVE-2026-85515.html * https://www.suse.com/security/cve/CVE-2026-97873.html * https://bugzilla.suse.com/show_bug.cgi?id=1284065 * https://bugzilla.suse.com/show_bug.cgi?id=1284073 * https://bugzilla.suse.com/show_bug.cgi?id=1284075 * https://bugzilla.suse.com/show_bug.cgi?id=1284165 * https://bugzilla.suse.com/show_bug.cgi?id=1284205 * https://bugzilla.suse.com/show_bug.cgi?id=1284212 * https://bugzilla.suse.com/show_bug.cgi?id=1284213 * https://bugzilla.suse.com/show_bug.cgi?id=1284215 * https://bugzilla.suse.com/show_bug.cgi?id=1284218 * https://bugzilla.suse.com/show_bug.cgi?id=1284219 * https://bugzilla.suse.com/show_bug.cgi?id=1284220 * https://bugzilla.suse.com/show_bug.cgi?id=1284221 * https://bugzilla.suse.com/show_bug.cgi?id=1284222 * https://bugzilla.suse.com/show_bug.cgi?id=1284224 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:33:40 -0000 Subject: SUSE-SU-2026:4796-1: moderate: Security update for libpng16 Message-ID: <179258602011.14165.17029674959696909653@c0911b1ee8c1> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4796-1 Release Date: 2026-10-21T07:53:21Z Rating: moderate References: * bsc#1283183 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libpng16 fixes the following issue: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59: * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4796 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4796 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libpng16-16-1.6.59-150600.3.26.1 * libpng16-tools-1.6.59-150600.3.26.1 * libpng16-debugsource-1.6.59-150600.3.26.1 * libpng16-16-debuginfo-1.6.59-150600.3.26.1 * libpng16-tools-debuginfo-1.6.59-150600.3.26.1 * libpng16-compat-devel-1.6.59-150600.3.26.1 * libpng16-devel-1.6.59-150600.3.26.1 * openSUSE Leap 15.6 (x86_64) * libpng16-16-32bit-1.6.59-150600.3.26.1 * libpng16-devel-32bit-1.6.59-150600.3.26.1 * libpng16-compat-devel-32bit-1.6.59-150600.3.26.1 * libpng16-16-32bit-debuginfo-1.6.59-150600.3.26.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libpng16-compat-devel-64bit-1.6.59-150600.3.26.1 * libpng16-16-64bit-1.6.59-150600.3.26.1 * libpng16-devel-64bit-1.6.59-150600.3.26.1 * libpng16-16-64bit-debuginfo-1.6.59-150600.3.26.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libpng16-16-1.6.59-150600.3.26.1 * libpng16-debugsource-1.6.59-150600.3.26.1 * libpng16-16-debuginfo-1.6.59-150600.3.26.1 * libpng16-compat-devel-1.6.59-150600.3.26.1 * libpng16-devel-1.6.59-150600.3.26.1 * Basesystem Module 15-SP7 (x86_64) * libpng16-16-32bit-1.6.59-150600.3.26.1 * libpng16-16-32bit-debuginfo-1.6.59-150600.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:33:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:33:46 -0000 Subject: SUSE-SU-2026:4795-1: important: Security update for cyrus-sasl Message-ID: <179258602699.14165.14716206809933027139@c0911b1ee8c1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4795-1 Release Date: 2026-10-21T07:52:59Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4795 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4795 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-2.1.26-14.10.1 * cyrus-sasl-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-2.1.26-14.10.1 * libsasl2-3-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-2.1.26-14.10.1 * cyrus-sasl-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-2.1.26-14.10.1 * cyrus-sasl-digestmd5-2.1.26-14.10.1 * cyrus-sasl-devel-2.1.26-14.10.1 * cyrus-sasl-crammd5-2.1.26-14.10.1 * cyrus-sasl-digestmd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-plain-2.1.26-14.10.1 * libsasl2-3-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debugsource-2.1.26-14.10.1 * cyrus-sasl-debugsource-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-2.1.26-14.10.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * cyrus-sasl-crammd5-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-32bit-2.1.26-14.10.1 * cyrus-sasl-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-32bit-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-32bit-2.1.26-14.10.1 * libsasl2-3-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-32bit-2.1.26-14.10.1 * libsasl2-3-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-otp-32bit-2.1.26-14.10.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cyrus-sasl-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-2.1.26-14.10.1 * cyrus-sasl-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-32bit-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-2.1.26-14.10.1 * cyrus-sasl-gssapi-2.1.26-14.10.1 * cyrus-sasl-otp-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-32bit-2.1.26-14.10.1 * libsasl2-3-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-debuginfo-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-digestmd5-2.1.26-14.10.1 * cyrus-sasl-devel-2.1.26-14.10.1 * cyrus-sasl-plain-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-2.1.26-14.10.1 * cyrus-sasl-digestmd5-debuginfo-2.1.26-14.10.1 * libsasl2-3-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-plain-2.1.26-14.10.1 * cyrus-sasl-gssapi-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-crammd5-debuginfo-2.1.26-14.10.1 * cyrus-sasl-debuginfo-32bit-2.1.26-14.10.1 * libsasl2-3-2.1.26-14.10.1 * cyrus-sasl-otp-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-32bit-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debuginfo-2.1.26-14.10.1 * cyrus-sasl-saslauthd-debugsource-2.1.26-14.10.1 * cyrus-sasl-debugsource-2.1.26-14.10.1 * libsasl2-3-32bit-2.1.26-14.10.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.26-14.10.1 * cyrus-sasl-otp-debuginfo-2.1.26-14.10.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 12:34:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 12:34:02 -0000 Subject: SUSE-SU-2026:4787-1: important: Security update for containerd Message-ID: <179258604221.14165.16012288040070688816@c0911b1ee8c1> # Security update for containerd Announcement ID: SUSE-SU-2026:4787-1 Release Date: 2026-10-21T04:29:25Z Rating: important References: * bsc#1268430 Cross-References: * CVE-2026-53488 CVSS scores: * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4787 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4787 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4787 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4787 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4787 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4787 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4787 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4787 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4787 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4787 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4787 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4787 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4787 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4787 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4787 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4787 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4787 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-150000.149.1 * containerd-ctr-1.7.29-150000.149.1 * containerd-devel-1.7.29-150000.149.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53488.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:30:21 -0000 Subject: SUSE-SU-2026:4812-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6) Message-ID: <179260022125.2368.16898714127307868253@6232765b24e4> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4812-1 Release Date: 2026-10-21T09:34:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.95 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4812 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4813 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4812 SUSE-2026-4813 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-11-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_81-default-debuginfo-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_18-debugsource-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_81-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_95-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_22-debugsource-11-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:30:27 -0000 Subject: SUSE-SU-2026:4829-1: moderate: Security update for libraw Message-ID: <179260022727.2368.14823121985627128740@6232765b24e4> # Security update for libraw Announcement ID: SUSE-SU-2026:4829-1 Release Date: 2026-10-21T11:59:15Z Rating: moderate References: * bsc#1282783 Cross-References: * CVE-2026-88387 CVSS scores: * CVE-2026-88387 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88387 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88387 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for libraw fixes the following issue: * CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc#1282783). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4829 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4829 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4829 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4829 ## Package List: * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libraw-tools-0.21.1-150600.3.13.1 * libraw23-0.21.1-150600.3.13.1 * libraw-devel-static-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * libraw-devel-0.21.1-150600.3.13.1 * libraw23-debuginfo-0.21.1-150600.3.13.1 * libraw-tools-debuginfo-0.21.1-150600.3.13.1 * openSUSE Leap 15.6 (x86_64) * libraw23-32bit-debuginfo-0.21.1-150600.3.13.1 * libraw23-32bit-0.21.1-150600.3.13.1 * openSUSE Leap 15.6 (aarch64_ilp32) * libraw23-64bit-debuginfo-0.21.1-150600.3.13.1 * libraw23-64bit-0.21.1-150600.3.13.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libraw23-0.21.1-150600.3.13.1 * libraw23-debuginfo-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * libraw-devel-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * libraw-tools-0.21.1-150600.3.13.1 * libraw-debugsource-0.21.1-150600.3.13.1 * libraw-devel-0.21.1-150600.3.13.1 * libraw-devel-static-0.21.1-150600.3.13.1 * libraw-tools-debuginfo-0.21.1-150600.3.13.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88387.html * https://bugzilla.suse.com/show_bug.cgi?id=1282783 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:30:33 -0000 Subject: SUSE-SU-2026:4828-1: moderate: Security update for openexr Message-ID: <179260023336.2368.336008874843632317@6232765b24e4> # Security update for openexr Announcement ID: SUSE-SU-2026:4828-1 Release Date: 2026-10-21T11:58:42Z Rating: moderate References: * bsc#1282700 Cross-References: * CVE-2026-88384 CVSS scores: * CVE-2026-88384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88384 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * Desktop Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for openexr fixes the following issue: * CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed (bsc#1282700). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4828 ## Package List: * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openexr-debugsource-2.2.1-150000.3.58.1 * libIlmImf-2_2-23-debuginfo-2.2.1-150000.3.58.1 * openexr-debuginfo-2.2.1-150000.3.58.1 * libIlmImfUtil-2_2-23-debuginfo-2.2.1-150000.3.58.1 * openexr-devel-2.2.1-150000.3.58.1 * libIlmImf-2_2-23-2.2.1-150000.3.58.1 * libIlmImfUtil-2_2-23-2.2.1-150000.3.58.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88384.html * https://bugzilla.suse.com/show_bug.cgi?id=1282700 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:30:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:30:45 -0000 Subject: SUSE-SU-2026:4827-1: moderate: Security update for openssh Message-ID: <179260024532.2368.17566194276012041481@6232765b24e4> # Security update for openssh Announcement ID: SUSE-SU-2026:4827-1 Release Date: 2026-10-21T11:57:42Z Rating: moderate References: * bsc#1259462 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities and has one security fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). Changes for openssh: \- Included mentions of the configuration drop-in directories (bsc#1259462). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4827 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4827 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4827 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4827 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4827 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-9.6p1-150600.6.52.2 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-cavs-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-cavs-9.6p1-150600.6.52.2 * openssh-9.6p1-150600.6.52.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-9.6p1-150600.6.52.2 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * openssh-debugsource-9.6p1-150600.6.52.2 * openssh-common-9.6p1-150600.6.52.2 * openssh-fips-9.6p1-150600.6.52.2 * openssh-server-9.6p1-150600.6.52.2 * openssh-askpass-gnome-9.6p1-150600.6.52.1 * openssh-helpers-9.6p1-150600.6.52.2 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.52.2 * openssh-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.52.1 * openssh-clients-9.6p1-150600.6.52.2 * openssh-common-debuginfo-9.6p1-150600.6.52.2 * openssh-clients-debuginfo-9.6p1-150600.6.52.2 * openssh-server-debuginfo-9.6p1-150600.6.52.2 * openssh-helpers-debuginfo-9.6p1-150600.6.52.2 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.52.1 * openssh-9.6p1-150600.6.52.2 ## References: * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:01 -0000 Subject: SUSE-SU-2026:4824-1: important: Security update for rootlesskit Message-ID: <179260026160.2368.13757228675825350348@6232765b24e4> # Security update for rootlesskit Announcement ID: SUSE-SU-2026:4824-1 Release Date: 2026-10-21T11:20:01Z Rating: important References: Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for rootlesskit rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4824 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4824 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4824 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4824 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4824 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4824 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4824 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4824 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150000.1.19.1 * rootlesskit-1.1.1-150000.1.19.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:06 -0000 Subject: SUSE-SU-2026:4823-1: important: Security update for rootlesskit Message-ID: <179260026609.2368.14634102955173150920@6232765b24e4> # Security update for rootlesskit Announcement ID: SUSE-SU-2026:4823-1 Release Date: 2026-10-21T11:18:33Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rootlesskit rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4823 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4823 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4823 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4823 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rootlesskit-debuginfo-1.1.1-150600.3.12.1 * rootlesskit-1.1.1-150600.3.12.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:11 -0000 Subject: SUSE-SU-2026:4822-1: important: Security update for docker Message-ID: <179260027191.2368.9377599972792332778@6232765b24e4> # Security update for docker Announcement ID: SUSE-SU-2026:4822-1 Release Date: 2026-10-21T11:17:43Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * Containers Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for docker rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4822 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4822 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4822 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4822 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4822 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4822 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4822 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4822 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4822 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4822 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4822 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4822 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4822 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4822 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4822 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4822 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4822 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * Containers Module 15-SP7 (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * docker-29.4.0_ce-150000.261.1 * docker-buildx-0.33.0-150000.261.1 * docker-debuginfo-29.4.0_ce-150000.261.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * docker-rootless-extras-29.4.0_ce-150000.261.1 * docker-bash-completion-29.4.0_ce-150000.261.1 * docker-zsh-completion-29.4.0_ce-150000.261.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:19 -0000 Subject: SUSE-SU-2026:4821-1: important: Security update for ca-certificates-mozilla Message-ID: <179260027958.2368.7941236834072653515@6232765b24e4> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:4821-1 Release Date: 2026-10-21T10:58:31Z Rating: important References: * bsc#1279961 * bsc#1286261 Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has two security fixes can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 Updated to 2.90 state (bsc#1279961) Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4821 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4821 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * ca-certificates-mozilla-2.92-12.62.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * ca-certificates-mozilla-2.92-12.62.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1279961 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:26 -0000 Subject: SUSE-SU-2026:4820-1: important: Security update for openssl-certs Message-ID: <179260028666.2368.2438292717463488136@6232765b24e4> # Security update for openssl-certs Announcement ID: SUSE-SU-2026:4820-1 Release Date: 2026-10-21T10:39:12Z Rating: important References: * bsc#1286261 Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that has one security fix can now be installed. ## Description: This update for openssl-certs fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4820 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4820 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch) * openssl-certs-2.92-0.7.39.1 * SUSE Linux Enterprise Server 11 SP4 (noarch) * openssl-certs-2.92-0.7.39.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:32 -0000 Subject: SUSE-SU-2026:4819-1: important: Security update for cifs-utils Message-ID: <179260029261.2368.9703655783443027128@6232765b24e4> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:4819-1 Release Date: 2026-10-21T10:16:29Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4819 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4819 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4819 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4819 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4819 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4819 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4819 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4819 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4819 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4819 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4819 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4819 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4819 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4819 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4819 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4819 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4819 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * pam_cifscreds-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * pam_cifscreds-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-devel-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-devel-6.15-150400.3.27.1 * cifs-utils-debuginfo-6.15-150400.3.27.1 * cifs-utils-debugsource-6.15-150400.3.27.1 * cifs-utils-6.15-150400.3.27.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:39 -0000 Subject: SUSE-SU-2026:4818-1: important: Security update for mutt Message-ID: <179260029972.2368.3180492272719681894@6232765b24e4> # Security update for mutt Announcement ID: SUSE-SU-2026:4818-1 Release Date: 2026-10-21T10:13:48Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4818 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4818 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4818 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4818 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4818 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4818 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4818 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4818 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-1.10.1-150000.3.32.1 * mutt-1.10.1-150000.3.32.1 * mutt-debuginfo-1.10.1-150000.3.32.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * mutt-lang-1.10.1-150000.3.32.1 * mutt-doc-1.10.1-150000.3.32.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:45 -0000 Subject: SUSE-SU-2026:4817-1: important: Security update for cyrus-sasl Message-ID: <179260030580.2368.5613775252987197820@6232765b24e4> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4817-1 Release Date: 2026-10-21T10:12:40Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4817 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4817 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4817 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4817 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4817 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4817 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (x86_64) * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-devel-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 * openSUSE Leap 15.5 (aarch64_ilp32) * libsasl2-3-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-64bit-2.1.28-150500.3.12.1 * libsasl2-3-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-devel-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-64bit-2.1.28-150500.3.12.1 * cyrus-sasl-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-devel-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-plain-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gssapi-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debugsource-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-devel-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-scram-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-gs2-2.1.28-150500.3.12.1 * cyrus-sasl-otp-2.1.28-150500.3.12.1 * cyrus-sasl-otp-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-2.1.28-150500.3.12.1 * cyrus-sasl-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-plain-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150500.3.12.1 * libsasl2-3-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150500.3.12.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-2.1.28-150500.3.12.1 * libsasl2-3-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150500.3.12.1 * libsasl2-3-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-gssapi-32bit-2.1.28-150500.3.12.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150500.3.12.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150500.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:32:19 -0000 Subject: SUSE-SU-2026:4811-1: moderate: Security update for openssh Message-ID: <179260033986.2368.5519436505424946934@6232765b24e4> # Security update for openssh Announcement ID: SUSE-SU-2026:4811-1 Release Date: 2026-10-21T08:46:52Z Rating: moderate References: * bsc#1275074 * bsc#1275079 Cross-References: * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4811 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4811 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4811 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4811 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4811 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4811 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4811 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4811 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4811 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4811 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4811 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4811 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4811 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-cavs-debuginfo-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-cavs-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debugsource-8.4p1-150300.3.68.1 * openssh-common-8.4p1-150300.3.68.2 * openssh-server-8.4p1-150300.3.68.2 * openssh-debugsource-8.4p1-150300.3.68.2 * openssh-common-debuginfo-8.4p1-150300.3.68.2 * openssh-debuginfo-8.4p1-150300.3.68.2 * openssh-clients-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-debuginfo-8.4p1-150300.3.68.2 * openssh-8.4p1-150300.3.68.2 * openssh-fips-8.4p1-150300.3.68.2 * openssh-clients-8.4p1-150300.3.68.2 * openssh-server-debuginfo-8.4p1-150300.3.68.2 * openssh-helpers-8.4p1-150300.3.68.2 * openssh-askpass-gnome-debuginfo-8.4p1-150300.3.68.1 * openssh-askpass-gnome-8.4p1-150300.3.68.1 ## References: * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:31:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:31:57 -0000 Subject: SUSE-SU-2026:4816-1: moderate: Security update for poppler Message-ID: <179260031742.2368.4643796201958331284@6232765b24e4> # Security update for poppler Announcement ID: SUSE-SU-2026:4816-1 Release Date: 2026-10-21T10:11:32Z Rating: moderate References: * bsc#1282531 * bsc#1282532 * bsc#1283330 * bsc#1283331 * bsc#1284844 Cross-References: * CVE-2026-102620 * CVE-2026-102621 * CVE-2026-107705 * CVE-2026-93313 * CVE-2026-93314 CVSS scores: * CVE-2026-102620 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-102620 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-102620 ( NVD ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102620 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-102621 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-102621 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-102621 ( NVD ): 1.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102621 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-107705 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-107705 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107705 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93313 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93313 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93313 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-93314 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-93314 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93314 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L Affected Products: * openSUSE Leap 15.4 An update that solves five vulnerabilities can now be installed. ## Description: This update for poppler fixes the following issues: * CVE-2026-93313: JBIG2 stream processing can cause integer overflows (bsc#1282532). * CVE-2026-93314: TrueType font processing can cause integer overflows (bsc#1282531). * CVE-2026-102620: Data corruption via integer overflow in FoFiTrueType:cvtSfnts (bsc#1283330). * CVE-2026-102621: Denial of Service via integer overflow in SplashClip (bsc#1283331). * CVE-2026-107705: Denial of Service via stack-based buffer overflow in PDF decryption (bsc#1284844). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4816 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * poppler-tools-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-22.01.0-150400.3.51.1 * typelib-1_0-Poppler-0_18-22.01.0-150400.3.51.1 * poppler-debugsource-22.01.0-150400.3.51.1 * poppler-tools-22.01.0-150400.3.51.1 * libpoppler-cpp0-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt6-3-22.01.0-150400.3.51.1 * libpoppler-glib-devel-22.01.0-150400.3.51.1 * libpoppler-glib8-22.01.0-150400.3.51.1 * libpoppler-qt5-1-debuginfo-22.01.0-150400.3.51.1 * poppler-qt6-debugsource-22.01.0-150400.3.51.1 * libpoppler-devel-22.01.0-150400.3.51.1 * libpoppler-qt5-devel-22.01.0-150400.3.51.1 * libpoppler-glib8-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt6-devel-22.01.0-150400.3.51.1 * libpoppler-cpp0-22.01.0-150400.3.51.1 * libpoppler-qt6-3-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-22.01.0-150400.3.51.1 * poppler-qt5-debugsource-22.01.0-150400.3.51.1 * openSUSE Leap 15.4 (x86_64) * libpoppler-glib8-32bit-22.01.0-150400.3.51.1 * libpoppler-qt5-1-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-cpp0-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-32bit-22.01.0-150400.3.51.1 * libpoppler117-32bit-22.01.0-150400.3.51.1 * libpoppler-cpp0-32bit-22.01.0-150400.3.51.1 * libpoppler117-32bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-glib8-32bit-debuginfo-22.01.0-150400.3.51.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libpoppler-cpp0-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-cpp0-64bit-22.01.0-150400.3.51.1 * libpoppler-glib8-64bit-22.01.0-150400.3.51.1 * libpoppler-qt5-1-64bit-22.01.0-150400.3.51.1 * libpoppler117-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-glib8-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler-qt5-1-64bit-debuginfo-22.01.0-150400.3.51.1 * libpoppler117-64bit-22.01.0-150400.3.51.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102620.html * https://www.suse.com/security/cve/CVE-2026-102621.html * https://www.suse.com/security/cve/CVE-2026-107705.html * https://www.suse.com/security/cve/CVE-2026-93313.html * https://www.suse.com/security/cve/CVE-2026-93314.html * https://bugzilla.suse.com/show_bug.cgi?id=1282531 * https://bugzilla.suse.com/show_bug.cgi?id=1282532 * https://bugzilla.suse.com/show_bug.cgi?id=1283330 * https://bugzilla.suse.com/show_bug.cgi?id=1283331 * https://bugzilla.suse.com/show_bug.cgi?id=1284844 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:32:04 -0000 Subject: SUSE-SU-2026:4815-1: moderate: Security update for libheif Message-ID: <179260032498.2368.13170548932555489462@6232765b24e4> # Security update for libheif Announcement ID: SUSE-SU-2026:4815-1 Release Date: 2026-10-21T10:11:10Z Rating: moderate References: * bsc#1279444 * bsc#1281829 Cross-References: * CVE-2026-84449 CVSS scores: * CVE-2026-84449 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84449 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-84449 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for libheif fixes the following issues: * CVE-2026-84449: hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV (bsc#1281829). * Out-of-bounds read and write in derived-item and pixel-plane handling (bsc#1279444). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4815 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gdk-pixbuf-loader-libheif-debuginfo-1.12.0-150400.3.30.1 * gdk-pixbuf-loader-libheif-1.12.0-150400.3.30.1 * libheif1-1.12.0-150400.3.30.1 * libheif-debugsource-1.12.0-150400.3.30.1 * libheif-devel-1.12.0-150400.3.30.1 * libheif1-debuginfo-1.12.0-150400.3.30.1 * openSUSE Leap 15.4 (x86_64) * libheif1-32bit-1.12.0-150400.3.30.1 * libheif1-32bit-debuginfo-1.12.0-150400.3.30.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libheif1-64bit-1.12.0-150400.3.30.1 * libheif1-64bit-debuginfo-1.12.0-150400.3.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84449.html * https://bugzilla.suse.com/show_bug.cgi?id=1279444 * https://bugzilla.suse.com/show_bug.cgi?id=1281829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 16:32:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 16:32:11 -0000 Subject: SUSE-SU-2026:4814-1: moderate: Security update for libpng16 Message-ID: <179260033120.2368.9304134593973168267@6232765b24e4> # Security update for libpng16 Announcement ID: SUSE-SU-2026:4814-1 Release Date: 2026-10-21T10:10:51Z Rating: moderate References: * bsc#1283183 * jsc#PED-16190 Cross-References: * CVE-2026-46675 CVSS scores: * CVE-2026-46675 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46675 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves one vulnerability and contains one feature can now be installed. ## Description: This update for libpng16 fixes the following issues: * CVE-2026-46675: Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression (bsc#1283183). Changes for libpng16: * version update to 1.6.59 (jsc#PED-16190): * Fixed a regression introduced in version 1.6.47 that caused libpng to reject hIST chunks in their correct position, after PLTE. * Prevented a double free of `png_struct` members after an allocation failure. * Applied fixes and updates to the CMake build. * Adopted the REUSE Specification for licensing the CI files. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4814 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4814 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4814 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4814 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4814 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libpng16-16-1.6.59-150000.3.28.1 * libpng16-debugsource-1.6.59-150000.3.28.1 * libpng16-16-debuginfo-1.6.59-150000.3.28.1 ## References: * https://www.suse.com/security/cve/CVE-2026-46675.html * https://bugzilla.suse.com/show_bug.cgi?id=1283183 * https://jira.suse.com/browse/PED-16190 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:30:16 -0000 Subject: SUSE-SU-2026:4831-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6) Message-ID: <179261461639.291.8606387213046984443@9bf698548bc1> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4831-1 Release Date: 2026-10-21T15:34:28Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4841 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4831 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4840 SUSE-SLE-Module-Live-Patching-15-SP6-2026-4830 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4831 SUSE-2026-4840 SUSE-2026-4830 SUSE-2026-4841 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-13-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_92-default-debuginfo-11-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_20-debugsource-13-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_23-debugsource-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-debuginfo-13-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-debuginfo-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-debuginfo-10-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_19-debugsource-14-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_21-debugsource-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_84-default-14-150600.2.1 * kernel-livepatch-6_4_0-150600_23_100-default-10-150600.2.1 * kernel-livepatch-6_4_0-150600_23_92-default-11-150600.2.1 * kernel-livepatch-6_4_0-150600_23_87-default-13-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:30:22 -0000 Subject: SUSE-SU-2026:4845-1: moderate: Security update for tiff Message-ID: <179261462235.291.15201820080136109617@9bf698548bc1> # Security update for tiff Announcement ID: SUSE-SU-2026:4845-1 Release Date: 2026-10-21T15:55:25Z Rating: moderate References: * bsc#1280164 Cross-References: * CVE-2026-18495 CVSS scores: * CVE-2026-18495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-18495 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H * CVE-2026-18495 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for tiff fixes the following issue: * CVE-2026-18495: libtiff: heap-buffer overflow via numeric truncation in the JPEG raw passthrough (bsc#1280164). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4845 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4845 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4845 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4845 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4845 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4845 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libtiff5-4.0.9-150000.45.72.1 * tiff-debugsource-4.0.9-150000.45.72.1 * libtiff5-debuginfo-4.0.9-150000.45.72.1 * tiff-debuginfo-4.0.9-150000.45.72.1 * Basesystem Module 15-SP7 (x86_64) * libtiff5-32bit-debuginfo-4.0.9-150000.45.72.1 * libtiff5-32bit-4.0.9-150000.45.72.1 ## References: * https://www.suse.com/security/cve/CVE-2026-18495.html * https://bugzilla.suse.com/show_bug.cgi?id=1280164 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:30:28 -0000 Subject: SUSE-SU-2026:4844-1: important: Security update for php8 Message-ID: <179261462888.291.2654822038557147700@9bf698548bc1> # Security update for php8 Announcement ID: SUSE-SU-2026:4844-1 Release Date: 2026-10-21T15:45:09Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * Web and Scripting Module 15-SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: Update to php 8.3.36: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Web-Scripting-15-SP7-2026-4844 ## Package List: * Web and Scripting Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php8-debugsource-8.3.36-150700.3.24.1 * php8-exif-debuginfo-8.3.36-150700.3.24.1 * php8-ctype-8.3.36-150700.3.24.1 * php8-dba-8.3.36-150700.3.24.1 * php8-soap-8.3.36-150700.3.24.1 * php8-intl-debuginfo-8.3.36-150700.3.24.1 * php8-sysvshm-debuginfo-8.3.36-150700.3.24.1 * php8-sqlite-debuginfo-8.3.36-150700.3.24.1 * php8-mysql-8.3.36-150700.3.24.1 * php8-tidy-debuginfo-8.3.36-150700.3.24.1 * php8-embed-debuginfo-8.3.36-150700.3.24.1 * php8-enchant-8.3.36-150700.3.24.1 * php8-bcmath-8.3.36-150700.3.24.1 * php8-bcmath-debuginfo-8.3.36-150700.3.24.1 * php8-intl-8.3.36-150700.3.24.1 * php8-embed-debugsource-8.3.36-150700.3.24.1 * php8-iconv-debuginfo-8.3.36-150700.3.24.1 * php8-sysvshm-8.3.36-150700.3.24.1 * php8-xsl-8.3.36-150700.3.24.1 * php8-sysvsem-debuginfo-8.3.36-150700.3.24.1 * php8-shmop-8.3.36-150700.3.24.1 * php8-dom-debuginfo-8.3.36-150700.3.24.1 * php8-zip-debuginfo-8.3.36-150700.3.24.1 * php8-xmlreader-8.3.36-150700.3.24.1 * php8-sockets-8.3.36-150700.3.24.1 * php8-tidy-8.3.36-150700.3.24.1 * php8-exif-8.3.36-150700.3.24.1 * php8-sodium-8.3.36-150700.3.24.1 * php8-calendar-debuginfo-8.3.36-150700.3.24.1 * php8-zlib-8.3.36-150700.3.24.1 * php8-sysvsem-8.3.36-150700.3.24.1 * php8-xmlwriter-debuginfo-8.3.36-150700.3.24.1 * php8-fpm-8.3.36-150700.3.24.1 * php8-cli-debuginfo-8.3.36-150700.3.24.1 * php8-sodium-debuginfo-8.3.36-150700.3.24.1 * php8-iconv-8.3.36-150700.3.24.1 * php8-sysvmsg-8.3.36-150700.3.24.1 * php8-opcache-debuginfo-8.3.36-150700.3.24.1 * php8-ftp-debuginfo-8.3.36-150700.3.24.1 * php8-fpm-debugsource-8.3.36-150700.3.24.1 * php8-readline-debuginfo-8.3.36-150700.3.24.1 * php8-bz2-8.3.36-150700.3.24.1 * php8-gd-debuginfo-8.3.36-150700.3.24.1 * php8-fileinfo-debuginfo-8.3.36-150700.3.24.1 * php8-pgsql-8.3.36-150700.3.24.1 * php8-posix-8.3.36-150700.3.24.1 * php8-soap-debuginfo-8.3.36-150700.3.24.1 * php8-sockets-debuginfo-8.3.36-150700.3.24.1 * php8-ctype-debuginfo-8.3.36-150700.3.24.1 * php8-fastcgi-8.3.36-150700.3.24.1 * php8-mbstring-debuginfo-8.3.36-150700.3.24.1 * php8-zip-8.3.36-150700.3.24.1 * php8-gmp-8.3.36-150700.3.24.1 * php8-odbc-8.3.36-150700.3.24.1 * php8-snmp-8.3.36-150700.3.24.1 * php8-zlib-debuginfo-8.3.36-150700.3.24.1 * php8-calendar-8.3.36-150700.3.24.1 * php8-phar-debuginfo-8.3.36-150700.3.24.1 * php8-bz2-debuginfo-8.3.36-150700.3.24.1 * php8-pdo-debuginfo-8.3.36-150700.3.24.1 * php8-cli-8.3.36-150700.3.24.1 * php8-dba-debuginfo-8.3.36-150700.3.24.1 * apache2-mod_php8-debuginfo-8.3.36-150700.3.24.1 * php8-gmp-debuginfo-8.3.36-150700.3.24.1 * php8-pdo-8.3.36-150700.3.24.1 * php8-readline-8.3.36-150700.3.24.1 * php8-devel-8.3.36-150700.3.24.1 * php8-tokenizer-8.3.36-150700.3.24.1 * php8-curl-8.3.36-150700.3.24.1 * php8-gettext-8.3.36-150700.3.24.1 * php8-ldap-debuginfo-8.3.36-150700.3.24.1 * php8-tokenizer-debuginfo-8.3.36-150700.3.24.1 * php8-snmp-debuginfo-8.3.36-150700.3.24.1 * php8-xsl-debuginfo-8.3.36-150700.3.24.1 * php8-sqlite-8.3.36-150700.3.24.1 * php8-fpm-debuginfo-8.3.36-150700.3.24.1 * php8-pgsql-debuginfo-8.3.36-150700.3.24.1 * php8-openssl-8.3.36-150700.3.24.1 * php8-xmlwriter-8.3.36-150700.3.24.1 * php8-enchant-debuginfo-8.3.36-150700.3.24.1 * php8-gd-8.3.36-150700.3.24.1 * php8-test-8.3.36-150700.3.24.1 * php8-shmop-debuginfo-8.3.36-150700.3.24.1 * php8-odbc-debuginfo-8.3.36-150700.3.24.1 * php8-ldap-8.3.36-150700.3.24.1 * php8-opcache-8.3.36-150700.3.24.1 * apache2-mod_php8-8.3.36-150700.3.24.1 * php8-mbstring-8.3.36-150700.3.24.1 * php8-dom-8.3.36-150700.3.24.1 * php8-8.3.36-150700.3.24.1 * php8-pcntl-debuginfo-8.3.36-150700.3.24.1 * php8-curl-debuginfo-8.3.36-150700.3.24.1 * php8-sysvmsg-debuginfo-8.3.36-150700.3.24.1 * php8-debuginfo-8.3.36-150700.3.24.1 * php8-xmlreader-debuginfo-8.3.36-150700.3.24.1 * php8-openssl-debuginfo-8.3.36-150700.3.24.1 * php8-posix-debuginfo-8.3.36-150700.3.24.1 * php8-gettext-debuginfo-8.3.36-150700.3.24.1 * apache2-mod_php8-debugsource-8.3.36-150700.3.24.1 * php8-fileinfo-8.3.36-150700.3.24.1 * php8-mysql-debuginfo-8.3.36-150700.3.24.1 * php8-fastcgi-debuginfo-8.3.36-150700.3.24.1 * php8-embed-8.3.36-150700.3.24.1 * php8-pcntl-8.3.36-150700.3.24.1 * php8-ftp-8.3.36-150700.3.24.1 * php8-fastcgi-debugsource-8.3.36-150700.3.24.1 * php8-phar-8.3.36-150700.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:30:37 -0000 Subject: SUSE-SU-2026:4843-1: important: Security update for php8 Message-ID: <179261463782.291.2757264074484969808@9bf698548bc1> # Security update for php8 Announcement ID: SUSE-SU-2026:4843-1 Release Date: 2026-10-21T15:44:41Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4843 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4843 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4843 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ffi-debuginfo-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-ffi-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 * openSUSE Leap 15.6 (noarch) * php8-fpm-apache-8.2.35-150600.3.39.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php8-exif-8.2.35-150600.3.39.1 * php8-pgsql-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-8.2.35-150600.3.39.1 * php8-mbstring-debuginfo-8.2.35-150600.3.39.1 * php8-soap-8.2.35-150600.3.39.1 * php8-bcmath-debuginfo-8.2.35-150600.3.39.1 * php8-sodium-8.2.35-150600.3.39.1 * php8-dom-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debugsource-8.2.35-150600.3.39.1 * php8-phar-8.2.35-150600.3.39.1 * php8-8.2.35-150600.3.39.1 * php8-opcache-debuginfo-8.2.35-150600.3.39.1 * php8-calendar-8.2.35-150600.3.39.1 * php8-mysql-8.2.35-150600.3.39.1 * php8-fpm-debugsource-8.2.35-150600.3.39.1 * php8-tokenizer-8.2.35-150600.3.39.1 * php8-tidy-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-8.2.35-150600.3.39.1 * php8-mysql-debuginfo-8.2.35-150600.3.39.1 * php8-tidy-8.2.35-150600.3.39.1 * php8-pgsql-8.2.35-150600.3.39.1 * php8-opcache-8.2.35-150600.3.39.1 * php8-shmop-8.2.35-150600.3.39.1 * php8-fastcgi-8.2.35-150600.3.39.1 * php8-gettext-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-8.2.35-150600.3.39.1 * php8-curl-debuginfo-8.2.35-150600.3.39.1 * php8-sqlite-8.2.35-150600.3.39.1 * php8-odbc-8.2.35-150600.3.39.1 * php8-gd-8.2.35-150600.3.39.1 * php8-gd-debuginfo-8.2.35-150600.3.39.1 * php8-sysvsem-8.2.35-150600.3.39.1 * php8-zip-debuginfo-8.2.35-150600.3.39.1 * php8-gmp-debuginfo-8.2.35-150600.3.39.1 * php8-cli-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-8.2.35-150600.3.39.1 * php8-fileinfo-debuginfo-8.2.35-150600.3.39.1 * php8-fileinfo-8.2.35-150600.3.39.1 * php8-curl-8.2.35-150600.3.39.1 * php8-sqlite-debuginfo-8.2.35-150600.3.39.1 * php8-openssl-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-8.2.35-150600.3.39.1 * php8-gmp-8.2.35-150600.3.39.1 * php8-posix-debuginfo-8.2.35-150600.3.39.1 * php8-ftp-8.2.35-150600.3.39.1 * php8-enchant-8.2.35-150600.3.39.1 * php8-intl-debuginfo-8.2.35-150600.3.39.1 * php8-intl-8.2.35-150600.3.39.1 * php8-xmlreader-8.2.35-150600.3.39.1 * php8-sodium-debuginfo-8.2.35-150600.3.39.1 * php8-fastcgi-debuginfo-8.2.35-150600.3.39.1 * php8-sysvshm-debuginfo-8.2.35-150600.3.39.1 * php8-sysvmsg-8.2.35-150600.3.39.1 * php8-xsl-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-8.2.35-150600.3.39.1 * php8-pcntl-8.2.35-150600.3.39.1 * php8-zip-8.2.35-150600.3.39.1 * php8-posix-8.2.35-150600.3.39.1 * php8-soap-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-8.2.35-150600.3.39.1 * php8-pcntl-debuginfo-8.2.35-150600.3.39.1 * php8-phar-debuginfo-8.2.35-150600.3.39.1 * php8-shmop-debuginfo-8.2.35-150600.3.39.1 * php8-test-8.2.35-150600.3.39.1 * php8-xmlreader-debuginfo-8.2.35-150600.3.39.1 * php8-exif-debuginfo-8.2.35-150600.3.39.1 * php8-pdo-8.2.35-150600.3.39.1 * php8-debuginfo-8.2.35-150600.3.39.1 * php8-embed-debugsource-8.2.35-150600.3.39.1 * php8-sysvsem-debuginfo-8.2.35-150600.3.39.1 * php8-iconv-debuginfo-8.2.35-150600.3.39.1 * php8-bz2-debuginfo-8.2.35-150600.3.39.1 * php8-ldap-debuginfo-8.2.35-150600.3.39.1 * php8-xmlwriter-8.2.35-150600.3.39.1 * apache2-mod_php8-8.2.35-150600.3.39.1 * php8-ftp-debuginfo-8.2.35-150600.3.39.1 * apache2-mod_php8-debuginfo-8.2.35-150600.3.39.1 * php8-readline-debuginfo-8.2.35-150600.3.39.1 * php8-ctype-8.2.35-150600.3.39.1 * php8-debugsource-8.2.35-150600.3.39.1 * php8-calendar-debuginfo-8.2.35-150600.3.39.1 * php8-zlib-debuginfo-8.2.35-150600.3.39.1 * php8-mbstring-8.2.35-150600.3.39.1 * php8-sockets-8.2.35-150600.3.39.1 * php8-pdo-debuginfo-8.2.35-150600.3.39.1 * php8-fpm-debuginfo-8.2.35-150600.3.39.1 * php8-xsl-8.2.35-150600.3.39.1 * php8-dba-8.2.35-150600.3.39.1 * php8-gettext-8.2.35-150600.3.39.1 * php8-ctype-debuginfo-8.2.35-150600.3.39.1 * php8-odbc-debuginfo-8.2.35-150600.3.39.1 * php8-dom-8.2.35-150600.3.39.1 * php8-embed-8.2.35-150600.3.39.1 * php8-zlib-8.2.35-150600.3.39.1 * php8-bcmath-8.2.35-150600.3.39.1 * php8-fastcgi-debugsource-8.2.35-150600.3.39.1 * php8-readline-8.2.35-150600.3.39.1 * php8-sysvmsg-debuginfo-8.2.35-150600.3.39.1 * php8-dba-debuginfo-8.2.35-150600.3.39.1 * php8-snmp-debuginfo-8.2.35-150600.3.39.1 * php8-sockets-debuginfo-8.2.35-150600.3.39.1 * php8-cli-8.2.35-150600.3.39.1 * php8-enchant-debuginfo-8.2.35-150600.3.39.1 * php8-tokenizer-debuginfo-8.2.35-150600.3.39.1 * php8-devel-8.2.35-150600.3.39.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:30:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:30:59 -0000 Subject: SUSE-SU-2026:4837-1: important: Security update for buildah Message-ID: <179261465949.291.1110763372654867521@9bf698548bc1> # Security update for buildah Announcement ID: SUSE-SU-2026:4837-1 Release Date: 2026-10-21T14:15:40Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for buildah rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4837 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4837 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4837 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4837 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4837 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4837 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4837 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4837 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * buildah-1.35.5-150500.3.68.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * buildah-1.35.5-150500.3.68.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * buildah-1.35.5-150500.3.68.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:31:06 -0000 Subject: SUSE-SU-2026:4836-1: important: Security update for cyrus-sasl Message-ID: <179261466602.291.4411134641292281859@9bf698548bc1> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:4836-1 Release Date: 2026-10-21T12:52:41Z Rating: important References: * bsc#1284687 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Legacy Module 15-SP7 * openSUSE Leap 15.6 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cyrus-sasl fixes the following issue: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4836 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4836 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4836 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4836 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4836 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4836 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-scram-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gs2-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (x86_64) * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-devel-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-32bit-2.1.28-150600.7.17.1 * openSUSE Leap 15.6 (aarch64_ilp32) * cyrus-sasl-digestmd5-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-devel-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-ldap-auxprop-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-64bit-2.1.28-150600.7.17.1 * libsasl2-3-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-64bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-otp-64bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-64bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-64bit-debuginfo-2.1.28-150600.7.17.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * Basesystem Module 15-SP7 (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * Server Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cyrus-sasl-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-2.1.28-150600.7.17.1 * libsasl2-3-2.1.28-150600.7.17.1 * cyrus-sasl-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gs2-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-2.1.28-150600.7.17.1 * cyrus-sasl-otp-2.1.28-150600.7.17.1 * cyrus-sasl-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-digestmd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-otp-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-devel-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-plain-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-scram-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-sqlauxprop-bdb-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-ntlm-2.1.28-150600.7.17.1 * cyrus-sasl-saslauthd-bdb-debugsource-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-gssapi-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-otp-2.1.28-150600.7.17.1 * cyrus-sasl-bdb-crammd5-debuginfo-2.1.28-150600.7.17.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * cyrus-sasl-crammd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-digestmd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-crammd5-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-debuginfo-2.1.28-150600.7.17.1 * libsasl2-3-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-plain-32bit-2.1.28-150600.7.17.1 * cyrus-sasl-32bit-debuginfo-2.1.28-150600.7.17.1 * cyrus-sasl-gssapi-32bit-2.1.28-150600.7.17.1 * libsasl2-3-32bit-2.1.28-150600.7.17.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1284687 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:31:32 -0000 Subject: SUSE-SU-2026:4835-1: important: Security update for xwayland Message-ID: <179261469234.291.2453646717501666139@9bf698548bc1> # Security update for xwayland Announcement ID: SUSE-SU-2026:4835-1 Release Date: 2026-10-21T12:51:34Z Rating: important References: * bsc#1281213 * bsc#1281218 * bsc#1281220 * bsc#1281225 * bsc#1281227 * bsc#1281233 * bsc#1281236 * bsc#1281238 * bsc#1281240 * bsc#1281241 * bsc#1281242 * bsc#1281244 Cross-References: * CVE-2026-88812 * CVE-2026-93515 * CVE-2026-93516 * CVE-2026-93517 * CVE-2026-93518 * CVE-2026-93519 * CVE-2026-93520 * CVE-2026-93521 * CVE-2026-93522 * CVE-2026-93523 * CVE-2026-93524 * CVE-2026-93536 CVSS scores: * CVE-2026-88812 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-88812 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93516 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93516 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93517 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93517 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93518 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93518 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93519 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93519 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93520 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93520 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93521 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93521 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93522 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93522 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93523 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93523 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93524 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93524 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93536 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93536 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for xwayland fixes the following issues: * CVE-2026-88812: XKB SetGeometry TextDoodad Double Free (bsc#1281213). * CVE-2026-93515: X.Org Server Present Extension Use-After-Free (bsc#1281218). * CVE-2026-93516: X.Org Server XInput Passive Grab Use-After-Free (bsc#1281220). * CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow (bsc#1281225). * CVE-2026-93518: XKB ResizeKeyType Numeric Truncation (bsc#1281227). * CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow (bsc#1281233). * CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write (bsc#1281236). * CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow (bsc#1281238). * CVE-2026-93522: Glamor CopyArea Heap Buffer Overflow (bsc#1281240). * CVE-2026-93523: XInput2 PassiveUngrabDevice Out-of-Bounds Write (bsc#1281241). * CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (bsc#1281242). * CVE-2026-93536: GestureBuildSprite Use-After-Free (bsc#1281244). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4835 ## Package List: * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * xwayland-24.1.5-150700.3.25.1 * xwayland-debugsource-24.1.5-150700.3.25.1 * xwayland-debuginfo-24.1.5-150700.3.25.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88812.html * https://www.suse.com/security/cve/CVE-2026-93515.html * https://www.suse.com/security/cve/CVE-2026-93516.html * https://www.suse.com/security/cve/CVE-2026-93517.html * https://www.suse.com/security/cve/CVE-2026-93518.html * https://www.suse.com/security/cve/CVE-2026-93519.html * https://www.suse.com/security/cve/CVE-2026-93520.html * https://www.suse.com/security/cve/CVE-2026-93521.html * https://www.suse.com/security/cve/CVE-2026-93522.html * https://www.suse.com/security/cve/CVE-2026-93523.html * https://www.suse.com/security/cve/CVE-2026-93524.html * https://www.suse.com/security/cve/CVE-2026-93536.html * https://bugzilla.suse.com/show_bug.cgi?id=1281213 * https://bugzilla.suse.com/show_bug.cgi?id=1281218 * https://bugzilla.suse.com/show_bug.cgi?id=1281220 * https://bugzilla.suse.com/show_bug.cgi?id=1281225 * https://bugzilla.suse.com/show_bug.cgi?id=1281227 * https://bugzilla.suse.com/show_bug.cgi?id=1281233 * https://bugzilla.suse.com/show_bug.cgi?id=1281236 * https://bugzilla.suse.com/show_bug.cgi?id=1281238 * https://bugzilla.suse.com/show_bug.cgi?id=1281240 * https://bugzilla.suse.com/show_bug.cgi?id=1281241 * https://bugzilla.suse.com/show_bug.cgi?id=1281242 * https://bugzilla.suse.com/show_bug.cgi?id=1281244 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:31:50 -0000 Subject: SUSE-SU-2026:4834-1: important: Security update for MozillaFirefox Message-ID: <179261471077.291.10175223746295527805@9bf698548bc1> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4834-1 Release Date: 2026-10-21T12:51:18Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value. (bsc#1259727) * CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712) * CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730) * CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263) * CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. (bsc#1264713) * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service. (bsc#1275098) * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks. (bsc#1275098) * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c. (bsc#1275736) * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service. (bsc#1275605) * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash. (bsc#1275736) * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks. (bsc#1275736) * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption. (bsc#1275736) * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters. (bsc#1282347) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4834 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4834 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4834 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4834 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4834 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4834 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4834 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4834 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4834 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4834 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4834 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4834 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-branding-upstream-153.5.0-150400.157.16.1 * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * openSUSE Leap 15.4 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * Desktop Applications Module 15-SP7 (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debugsource-153.5.0-150400.157.16.1 * MozillaFirefox-translations-other-153.5.0-150400.157.16.1 * MozillaFirefox-translations-common-153.5.0-150400.157.16.1 * MozillaFirefox-153.5.0-150400.157.16.1 * MozillaFirefox-debuginfo-153.5.0-150400.157.16.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * MozillaFirefox-devel-153.5.0-150400.157.16.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:31:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:31:57 -0000 Subject: SUSE-SU-2026:4833-1: moderate: Security update for libraw Message-ID: <179261471708.291.415010256772797348@9bf698548bc1> # Security update for libraw Announcement ID: SUSE-SU-2026:4833-1 Release Date: 2026-10-21T12:49:21Z Rating: moderate References: * bsc#1282783 Cross-References: * CVE-2026-88387 CVSS scores: * CVE-2026-88387 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-88387 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-88387 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 An update that solves one vulnerability can now be installed. ## Description: This update for libraw fixes the following issue: * CVE-2026-88387: incorrect numeric conversion in `LibRaw::parse_tiff_ifd()` when processing TIFF tag `0x00fe` can lead to undefined behavior and a process crash when a specially crafted file is processed (bsc#1282783). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4833 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * libraw-devel-static-0.20.2-150400.3.24.1 * libraw20-0.20.2-150400.3.24.1 * libraw-tools-0.20.2-150400.3.24.1 * libraw-devel-0.20.2-150400.3.24.1 * libraw-tools-debuginfo-0.20.2-150400.3.24.1 * libraw-debugsource-0.20.2-150400.3.24.1 * libraw20-debuginfo-0.20.2-150400.3.24.1 * openSUSE Leap 15.4 (x86_64) * libraw20-32bit-0.20.2-150400.3.24.1 * libraw20-32bit-debuginfo-0.20.2-150400.3.24.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libraw20-64bit-debuginfo-0.20.2-150400.3.24.1 * libraw20-64bit-0.20.2-150400.3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88387.html * https://bugzilla.suse.com/show_bug.cgi?id=1282783 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 21 20:32:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 21 Oct 2026 20:32:03 -0000 Subject: SUSE-SU-2026:4832-1: moderate: Security update for python-hpack Message-ID: <179261472307.291.13277729278656065515@9bf698548bc1> # Security update for python-hpack Announcement ID: SUSE-SU-2026:4832-1 Release Date: 2026-10-21T12:48:54Z Rating: moderate References: * bsc#1283035 Cross-References: * CVE-2026-59980 CVSS scores: * CVE-2026-59980 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-59980 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-59980 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-hpack fixes the following issue: * CVE-2026-59980: unbounded variable integer decoding can cause run-away computation on malformed input, leading to quadratic runtime (bsc#1283035). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4832 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4832 ## Package List: * openSUSE Leap 15.4 (noarch) * python311-hpack-4.0.0-150400.8.6.1 * Python 3 Module 15-SP7 (noarch) * python311-hpack-4.0.0-150400.8.6.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59980.html * https://bugzilla.suse.com/show_bug.cgi?id=1283035 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 08:30:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 08:30:09 -0000 Subject: SUSE-SU-2026:4847-1: important: Security update for ca-certificates-mozilla Message-ID: <179265780995.953.8295107655175731711@8741a845db10> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:4847-1 Release Date: 2026-10-21T16:36:01Z Rating: important References: * bsc#1286261 Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4847 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4847 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4847 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4847 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4847 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4847 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4847 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4847 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4847 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4847 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4847 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4847 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4847 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4847 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4847 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4847 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4847 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Micro 5.3 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Micro 5.5 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * Basesystem Module 15-SP7 (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * Development Tools Module 15-SP7 (noarch) * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * ca-certificates-mozilla-2.92-150200.50.2 * ca-certificates-mozilla-prebuilt-2.92-150200.50.3 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 12:30:22 -0000 Subject: SUSE-SU-2026:4848-1: important: Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4) Message-ID: <179267222202.1378.5842212538108531103@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 52 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4848-1 Release Date: 2026-10-22T05:05:17Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.209 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4850 SUSE-SLE- Module-Live-Patching-15-SP4-2026-4851 SUSE-SLE-Module-Live- Patching-15-SP4-2026-4848 SUSE-SLE-Module-Live-Patching-15-SP4-2026-4849 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4850 SUSE-2026-4851 SUSE-2026-4848 SUSE-2026-4849 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-19-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-15-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_51-debugsource-10-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-19-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-15-150400.2.1 * kernel-livepatch-5_14_21-150400_24_205-default-debuginfo-10-150400.2.1 * kernel-livepatch-5_14_21-150400_24_209-default-debuginfo-9-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_52-debugsource-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-19-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-15-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 12:30:49 -0000 Subject: SUSE-SU-2026:4853-1: important: Security update for php7 Message-ID: <179267224902.1378.18400381929381697663@f5dd93353bb2> # Security update for php7 Announcement ID: SUSE-SU-2026:4853-1 Release Date: 2026-10-22T08:09:05Z Rating: important References: * bsc#1282875 * bsc#1282876 * bsc#1282877 * bsc#1282878 * bsc#1282980 * bsc#1282981 * bsc#1282985 * bsc#1282986 * bsc#1283044 * bsc#1283216 * bsc#1286027 Cross-References: * CVE-2025-1218 * CVE-2025-14181 * CVE-2026-109618 * CVE-2026-109619 * CVE-2026-6103 * CVE-2026-91765 * CVE-2026-91766 * CVE-2026-91767 * CVE-2026-91768 * CVE-2026-91769 * CVE-2026-92842 * CVE-2026-93682 CVSS scores: * CVE-2025-1218 ( SUSE ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2025-1218 ( NVD ): 3.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N * CVE-2025-14181 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2025-14181 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2025-14181 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-6103 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-6103 ( NVD ): 4.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N * CVE-2026-91765 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-91765 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91765 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-91766 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91766 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91766 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91767 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91767 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-91768 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91768 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-91769 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-91769 ( NVD ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-92842 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-92842 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-93682 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93682 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected Products: * Legacy Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for php7 fixes the following issues: * CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser (bsc#1282981). * CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing (bsc#1283216). * CVE-2026-6103: Archive entry injection via integer overflow in TAR parser (bsc#1282980). * CVE-2026-91765: Denial of Service via unbounded recursion in SOAP parser (bsc#1282875). * CVE-2026-91766: Credential disclosure via cross-origin HTTP redirects (bsc#1282876). * CVE-2026-91767: Information disclosure via crafted TLS server certificate (bsc#1282877). * CVE-2026-91768: Access control bypass via partial IPv6 address comparison (bsc#1282878). * CVE-2026-91769: OpenSSL stream peer verification falls back to the Common Name whenever no `subjectAltName` matches, allowing trusted certificate impersonation (bsc#1283044). * CVE-2026-92842: Information disclosure via out-of-bounds read in stream filters (bsc#1282985). * CVE-2026-93682: Out-of-bounds read via empty HTTP redirect Location header (bsc#1282986). * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4853 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4853 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4853 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4853 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4853 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4853 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4853 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4853 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4853 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4853 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4853 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-embed-debugsource-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-embed-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-test-7.4.33-150400.4.81.2 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-embed-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-embed-debugsource-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-embed-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-test-7.4.33-150400.4.81.2 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-embed-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * php7-odbc-7.4.33-150400.4.81.1 * php7-exif-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debugsource-7.4.33-150400.4.81.1 * php7-tokenizer-debuginfo-7.4.33-150400.4.81.1 * php7-pgsql-7.4.33-150400.4.81.1 * php7-pcntl-debuginfo-7.4.33-150400.4.81.1 * php7-tokenizer-7.4.33-150400.4.81.1 * php7-bz2-debuginfo-7.4.33-150400.4.81.1 * php7-snmp-7.4.33-150400.4.81.1 * php7-soap-7.4.33-150400.4.81.1 * php7-ftp-debuginfo-7.4.33-150400.4.81.1 * php7-iconv-7.4.33-150400.4.81.1 * php7-sodium-debuginfo-7.4.33-150400.4.81.1 * php7-dom-7.4.33-150400.4.81.1 * php7-mysql-debuginfo-7.4.33-150400.4.81.1 * php7-odbc-debuginfo-7.4.33-150400.4.81.1 * php7-sysvmsg-7.4.33-150400.4.81.1 * php7-bcmath-7.4.33-150400.4.81.1 * php7-ctype-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-debuginfo-7.4.33-150400.4.81.1 * php7-cli-7.4.33-150400.4.81.1 * php7-zip-7.4.33-150400.4.81.1 * php7-readline-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-debuginfo-7.4.33-150400.4.81.1 * php7-pdo-7.4.33-150400.4.81.1 * php7-mbstring-debuginfo-7.4.33-150400.4.81.1 * php7-sqlite-7.4.33-150400.4.81.1 * php7-debuginfo-7.4.33-150400.4.81.1 * php7-enchant-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debugsource-7.4.33-150400.4.81.1 * php7-json-7.4.33-150400.4.81.1 * php7-xmlrpc-7.4.33-150400.4.81.1 * php7-dom-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-7.4.33-150400.4.81.1 * php7-fileinfo-debuginfo-7.4.33-150400.4.81.1 * apache2-mod_php7-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-7.4.33-150400.4.81.1 * php7-calendar-7.4.33-150400.4.81.1 * php7-zlib-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-7.4.33-150400.4.81.1 * php7-posix-debuginfo-7.4.33-150400.4.81.1 * php7-phar-7.4.33-150400.4.81.1 * php7-calendar-debuginfo-7.4.33-150400.4.81.1 * php7-exif-7.4.33-150400.4.81.1 * php7-curl-7.4.33-150400.4.81.1 * php7-cli-debuginfo-7.4.33-150400.4.81.1 * php7-pcntl-7.4.33-150400.4.81.1 * php7-pdo-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-debuginfo-7.4.33-150400.4.81.1 * php7-7.4.33-150400.4.81.1 * php7-debugsource-7.4.33-150400.4.81.1 * php7-posix-7.4.33-150400.4.81.1 * php7-snmp-debuginfo-7.4.33-150400.4.81.1 * php7-sysvsem-7.4.33-150400.4.81.1 * php7-bz2-7.4.33-150400.4.81.1 * php7-iconv-debuginfo-7.4.33-150400.4.81.1 * php7-fastcgi-debuginfo-7.4.33-150400.4.81.1 * php7-ldap-7.4.33-150400.4.81.1 * php7-enchant-7.4.33-150400.4.81.1 * php7-fpm-debugsource-7.4.33-150400.4.81.1 * php7-mysql-7.4.33-150400.4.81.1 * php7-curl-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-debuginfo-7.4.33-150400.4.81.1 * php7-sysvshm-debuginfo-7.4.33-150400.4.81.1 * php7-devel-7.4.33-150400.4.81.1 * php7-sysvmsg-debuginfo-7.4.33-150400.4.81.1 * php7-gd-debuginfo-7.4.33-150400.4.81.1 * php7-dba-debuginfo-7.4.33-150400.4.81.1 * php7-gmp-debuginfo-7.4.33-150400.4.81.1 * php7-xmlrpc-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-7.4.33-150400.4.81.1 * php7-tidy-7.4.33-150400.4.81.1 * php7-phar-debuginfo-7.4.33-150400.4.81.1 * php7-sodium-7.4.33-150400.4.81.1 * php7-intl-7.4.33-150400.4.81.1 * php7-zip-debuginfo-7.4.33-150400.4.81.1 * php7-readline-7.4.33-150400.4.81.1 * php7-ftp-7.4.33-150400.4.81.1 * php7-intl-debuginfo-7.4.33-150400.4.81.1 * php7-soap-debuginfo-7.4.33-150400.4.81.1 * php7-opcache-7.4.33-150400.4.81.1 * php7-shmop-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-debuginfo-7.4.33-150400.4.81.1 * php7-bcmath-debuginfo-7.4.33-150400.4.81.1 * php7-zlib-7.4.33-150400.4.81.1 * php7-dba-7.4.33-150400.4.81.1 * php7-shmop-7.4.33-150400.4.81.1 * php7-xsl-7.4.33-150400.4.81.1 * php7-xsl-debuginfo-7.4.33-150400.4.81.1 * php7-mbstring-7.4.33-150400.4.81.1 * php7-json-debuginfo-7.4.33-150400.4.81.1 * php7-openssl-7.4.33-150400.4.81.1 * php7-xmlreader-debuginfo-7.4.33-150400.4.81.1 * php7-gettext-debuginfo-7.4.33-150400.4.81.1 * php7-sockets-7.4.33-150400.4.81.1 * php7-ctype-7.4.33-150400.4.81.1 * php7-xmlreader-7.4.33-150400.4.81.1 * php7-tidy-debuginfo-7.4.33-150400.4.81.1 * php7-fpm-7.4.33-150400.4.81.1 * php7-pgsql-debuginfo-7.4.33-150400.4.81.1 * php7-xmlwriter-7.4.33-150400.4.81.1 * php7-fileinfo-7.4.33-150400.4.81.1 * apache2-mod_php7-7.4.33-150400.4.81.1 * php7-gd-7.4.33-150400.4.81.1 ## References: * https://www.suse.com/security/cve/CVE-2025-1218.html * https://www.suse.com/security/cve/CVE-2025-14181.html * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://www.suse.com/security/cve/CVE-2026-6103.html * https://www.suse.com/security/cve/CVE-2026-91765.html * https://www.suse.com/security/cve/CVE-2026-91766.html * https://www.suse.com/security/cve/CVE-2026-91767.html * https://www.suse.com/security/cve/CVE-2026-91768.html * https://www.suse.com/security/cve/CVE-2026-91769.html * https://www.suse.com/security/cve/CVE-2026-92842.html * https://www.suse.com/security/cve/CVE-2026-93682.html * https://bugzilla.suse.com/show_bug.cgi?id=1282875 * https://bugzilla.suse.com/show_bug.cgi?id=1282876 * https://bugzilla.suse.com/show_bug.cgi?id=1282877 * https://bugzilla.suse.com/show_bug.cgi?id=1282878 * https://bugzilla.suse.com/show_bug.cgi?id=1282980 * https://bugzilla.suse.com/show_bug.cgi?id=1282981 * https://bugzilla.suse.com/show_bug.cgi?id=1282985 * https://bugzilla.suse.com/show_bug.cgi?id=1282986 * https://bugzilla.suse.com/show_bug.cgi?id=1283044 * https://bugzilla.suse.com/show_bug.cgi?id=1283216 * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 12:30:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 12:30:57 -0000 Subject: SUSE-SU-2026:4852-1: important: Security update for php8 Message-ID: <179267225729.1378.17553513379587614285@f5dd93353bb2> # Security update for php8 Announcement ID: SUSE-SU-2026:4852-1 Release Date: 2026-10-22T07:42:53Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4852 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4852 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4852 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4852 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4852 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4852 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4852 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4852 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4852 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * php8-bcmath-debuginfo-8.0.30-150400.4.80.1 * php8-odbc-debuginfo-8.0.30-150400.4.80.1 * php8-ftp-debuginfo-8.0.30-150400.4.80.1 * php8-posix-8.0.30-150400.4.80.1 * php8-embed-debugsource-8.0.30-150400.4.80.1 * php8-phar-8.0.30-150400.4.80.1 * php8-snmp-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-8.0.30-150400.4.80.1 * php8-sysvshm-8.0.30-150400.4.80.1 * php8-zlib-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-8.0.30-150400.4.80.1 * php8-mbstring-8.0.30-150400.4.80.1 * php8-xmlreader-debuginfo-8.0.30-150400.4.80.1 * php8-tidy-8.0.30-150400.4.80.1 * php8-fastcgi-debuginfo-8.0.30-150400.4.80.1 * php8-xsl-debuginfo-8.0.30-150400.4.80.1 * php8-test-8.0.30-150400.4.80.2 * php8-opcache-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-8.0.30-150400.4.80.1 * php8-8.0.30-150400.4.80.1 * php8-fileinfo-8.0.30-150400.4.80.1 * php8-gmp-debuginfo-8.0.30-150400.4.80.1 * php8-opcache-8.0.30-150400.4.80.1 * php8-pdo-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-8.0.30-150400.4.80.1 * php8-shmop-8.0.30-150400.4.80.1 * php8-curl-8.0.30-150400.4.80.1 * php8-sysvsem-debuginfo-8.0.30-150400.4.80.1 * php8-bz2-8.0.30-150400.4.80.1 * php8-devel-8.0.30-150400.4.80.1 * apache2-mod_php8-8.0.30-150400.4.80.1 * php8-gettext-debuginfo-8.0.30-150400.4.80.1 * php8-enchant-debuginfo-8.0.30-150400.4.80.1 * php8-curl-debuginfo-8.0.30-150400.4.80.1 * php8-fpm-debugsource-8.0.30-150400.4.80.1 * php8-sqlite-8.0.30-150400.4.80.1 * php8-ftp-8.0.30-150400.4.80.1 * php8-posix-debuginfo-8.0.30-150400.4.80.1 * php8-exif-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debuginfo-8.0.30-150400.4.80.1 * php8-gettext-8.0.30-150400.4.80.1 * php8-sockets-8.0.30-150400.4.80.1 * php8-zip-debuginfo-8.0.30-150400.4.80.1 * apache2-mod_php8-debugsource-8.0.30-150400.4.80.1 * php8-intl-debuginfo-8.0.30-150400.4.80.1 * php8-dba-debuginfo-8.0.30-150400.4.80.1 * php8-fileinfo-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-debuginfo-8.0.30-150400.4.80.1 * php8-cli-8.0.30-150400.4.80.1 * php8-gd-8.0.30-150400.4.80.1 * php8-readline-debuginfo-8.0.30-150400.4.80.1 * php8-tokenizer-8.0.30-150400.4.80.1 * php8-fastcgi-debugsource-8.0.30-150400.4.80.1 * php8-dom-8.0.30-150400.4.80.1 * php8-iconv-8.0.30-150400.4.80.1 * php8-tokenizer-debuginfo-8.0.30-150400.4.80.1 * php8-embed-debuginfo-8.0.30-150400.4.80.1 * php8-openssl-debuginfo-8.0.30-150400.4.80.1 * php8-zip-8.0.30-150400.4.80.1 * php8-fpm-debuginfo-8.0.30-150400.4.80.1 * php8-snmp-8.0.30-150400.4.80.1 * php8-mysql-debuginfo-8.0.30-150400.4.80.1 * php8-shmop-debuginfo-8.0.30-150400.4.80.1 * php8-cli-debuginfo-8.0.30-150400.4.80.1 * php8-iconv-debuginfo-8.0.30-150400.4.80.1 * php8-mbstring-debuginfo-8.0.30-150400.4.80.1 * php8-embed-8.0.30-150400.4.80.1 * php8-debuginfo-8.0.30-150400.4.80.1 * php8-ctype-8.0.30-150400.4.80.1 * php8-bz2-debuginfo-8.0.30-150400.4.80.1 * php8-exif-8.0.30-150400.4.80.1 * php8-sysvmsg-debuginfo-8.0.30-150400.4.80.1 * php8-dba-8.0.30-150400.4.80.1 * php8-readline-8.0.30-150400.4.80.1 * php8-openssl-8.0.30-150400.4.80.1 * php8-intl-8.0.30-150400.4.80.1 * php8-calendar-debuginfo-8.0.30-150400.4.80.1 * php8-sysvmsg-8.0.30-150400.4.80.1 * php8-sysvsem-8.0.30-150400.4.80.1 * php8-sockets-debuginfo-8.0.30-150400.4.80.1 * php8-xmlreader-8.0.30-150400.4.80.1 * php8-gd-debuginfo-8.0.30-150400.4.80.1 * php8-fastcgi-8.0.30-150400.4.80.1 * php8-enchant-8.0.30-150400.4.80.1 * php8-soap-debuginfo-8.0.30-150400.4.80.1 * php8-sodium-debuginfo-8.0.30-150400.4.80.1 * php8-ldap-debuginfo-8.0.30-150400.4.80.1 * php8-pgsql-debuginfo-8.0.30-150400.4.80.1 * php8-sqlite-debuginfo-8.0.30-150400.4.80.1 * php8-bcmath-8.0.30-150400.4.80.1 * php8-soap-8.0.30-150400.4.80.1 * php8-tidy-debuginfo-8.0.30-150400.4.80.1 * php8-dom-debuginfo-8.0.30-150400.4.80.1 * php8-mysql-8.0.30-150400.4.80.1 * php8-xsl-8.0.30-150400.4.80.1 * php8-debugsource-8.0.30-150400.4.80.1 * php8-pcntl-debuginfo-8.0.30-150400.4.80.1 * php8-pcntl-8.0.30-150400.4.80.1 * php8-phar-debuginfo-8.0.30-150400.4.80.1 * php8-gmp-8.0.30-150400.4.80.1 * php8-pdo-8.0.30-150400.4.80.1 * php8-sysvshm-debuginfo-8.0.30-150400.4.80.1 * php8-xmlwriter-8.0.30-150400.4.80.1 * php8-zlib-8.0.30-150400.4.80.1 * php8-odbc-8.0.30-150400.4.80.1 * php8-calendar-8.0.30-150400.4.80.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:30:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4856-1: important: Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4) Message-ID: <179268661553.8348.5152336129750819993@8741a845db10> # Security update for the Linux Kernel (Live Patch 56 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:4856-1 Release Date: 2026-10-22T09:05:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.225 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4856 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4856 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_225-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-7-150400.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_225-default-7-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_56-debugsource-7-150400.2.1 * kernel-livepatch-5_14_21-150400_24_225-default-debuginfo-7-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:30:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 16:30:30 -0000 Subject: SUSE-SU-2026:4855-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) Message-ID: <179268663073.8348.10017582183424077524@8741a845db10> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4855-1 Release Date: 2026-10-22T11:05:15Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4855 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4859 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4860 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4859 SUSE-2026-4860 SUSE-2026-4855 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-8-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_103-default-debuginfo-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_24-debugsource-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_112-default-debuginfo-8-150600.2.1 * kernel-livepatch-6_4_0-150600_23_103-default-9-150600.2.1 * kernel-livepatch-6_4_0-150600_23_109-default-debuginfo-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_26-debugsource-8-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_25-debugsource-8-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 16:31:02 -0000 Subject: SUSE-SU-2026:4858-1: critical: Security update for webkit2gtk3 Message-ID: <179268666284.8348.12343853460477328584@8741a845db10> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4858-1 Release Date: 2026-10-22T09:58:05Z Rating: critical References: * bsc#1276418 * bsc#1277001 * bsc#1277004 * bsc#1277005 * bsc#1277006 * bsc#1277007 * bsc#1277009 * bsc#1277010 * bsc#1277011 * bsc#1277012 * bsc#1277013 * bsc#1277014 * bsc#1277015 * bsc#1277016 * bsc#1277017 * bsc#1277018 * bsc#1277755 * bsc#1281116 * bsc#1284619 * bsc#1285528 Cross-References: * CVE-2024-1283 * CVE-2024-43091 * CVE-2024-43097 * CVE-2024-43767 * CVE-2024-43768 * CVE-2024-7966 * CVE-2024-8193 * CVE-2024-8198 * CVE-2024-8636 * CVE-2024-9123 * CVE-2025-0436 * CVE-2025-0444 * CVE-2025-10502 * CVE-2025-26416 * CVE-2025-32318 * CVE-2025-48622 * CVE-2025-54627 * CVE-2025-6558 * CVE-2025-8901 * CVE-2025-9478 * CVE-2026-0908 * CVE-2026-10009 * CVE-2026-10011 * CVE-2026-10012 * CVE-2026-10018 * CVE-2026-10019 * CVE-2026-10881 * CVE-2026-10883 * CVE-2026-10889 * CVE-2026-10907 * CVE-2026-10919 * CVE-2026-10941 * CVE-2026-10974 * CVE-2026-10977 * CVE-2026-10979 * CVE-2026-10985 * CVE-2026-10993 * CVE-2026-10994 * CVE-2026-11004 * CVE-2026-11024 * CVE-2026-11039 * CVE-2026-11040 * CVE-2026-11051 * CVE-2026-11057 * CVE-2026-11061 * CVE-2026-11065 * CVE-2026-11066 * CVE-2026-11087 * CVE-2026-11088 * CVE-2026-11090 * CVE-2026-11104 * CVE-2026-11109 * CVE-2026-11110 * CVE-2026-11111 * CVE-2026-11113 * CVE-2026-11121 * CVE-2026-11123 * CVE-2026-11124 * CVE-2026-11137 * CVE-2026-11138 * CVE-2026-11159 * CVE-2026-11191 * CVE-2026-11663 * CVE-2026-11675 * CVE-2026-13780 * CVE-2026-13781 * CVE-2026-13834 * CVE-2026-13841 * CVE-2026-13859 * CVE-2026-13877 * CVE-2026-13883 * CVE-2026-13971 * CVE-2026-14044 * CVE-2026-14125 * CVE-2026-14152 * CVE-2026-14382 * CVE-2026-14386 * CVE-2026-14387 * CVE-2026-14388 * CVE-2026-14389 * CVE-2026-14390 * CVE-2026-14396 * CVE-2026-14398 * CVE-2026-14400 * CVE-2026-14410 * CVE-2026-14411 * CVE-2026-14412 * CVE-2026-14413 * CVE-2026-14414 * CVE-2026-14418 * CVE-2026-14419 * CVE-2026-14425 * CVE-2026-14427 * CVE-2026-14429 * CVE-2026-15109 * CVE-2026-15766 * CVE-2026-15774 * CVE-2026-16413 * CVE-2026-16417 * CVE-2026-17653 * CVE-2026-17655 * CVE-2026-17667 * CVE-2026-17668 * CVE-2026-17671 * CVE-2026-17675 * CVE-2026-17678 * CVE-2026-17682 * CVE-2026-17683 * CVE-2026-17687 * CVE-2026-17689 * CVE-2026-17697 * CVE-2026-17702 * CVE-2026-17704 * CVE-2026-17714 * CVE-2026-17717 * CVE-2026-17718 * CVE-2026-17721 * CVE-2026-17740 * CVE-2026-17745 * CVE-2026-17750 * CVE-2026-17757 * CVE-2026-17771 * CVE-2026-17785 * CVE-2026-17801 * CVE-2026-17832 * CVE-2026-17847 * CVE-2026-17914 * CVE-2026-19160 * CVE-2026-19161 * CVE-2026-19173 * CVE-2026-19176 * CVE-2026-3536 * CVE-2026-3538 * CVE-2026-3909 * CVE-2026-3931 * CVE-2026-43670 * CVE-2026-4448 * CVE-2026-4460 * CVE-2026-4464 * CVE-2026-5283 * CVE-2026-5870 * CVE-2026-6296 * CVE-2026-6298 * CVE-2026-6364 * CVE-2026-64715 * CVE-2026-64718 * CVE-2026-64753 * CVE-2026-64778 * CVE-2026-64779 * CVE-2026-64780 * CVE-2026-64781 * CVE-2026-64782 * CVE-2026-64784 * CVE-2026-65331 * CVE-2026-65332 * CVE-2026-65333 * CVE-2026-65334 * CVE-2026-65335 * CVE-2026-65336 * CVE-2026-65337 * CVE-2026-65338 * CVE-2026-65340 * CVE-2026-65341 * CVE-2026-65351 * CVE-2026-7353 * CVE-2026-7354 * CVE-2026-7359 * CVE-2026-76041 * CVE-2026-78376 * CVE-2026-78904 * CVE-2026-78905 * CVE-2026-78906 * CVE-2026-78914 * CVE-2026-78958 * CVE-2026-78965 * CVE-2026-7900 * CVE-2026-79020 * CVE-2026-79043 * CVE-2026-79112 * CVE-2026-79118 * CVE-2026-79120 * CVE-2026-79127 * CVE-2026-79130 * CVE-2026-79131 * CVE-2026-79144 * CVE-2026-79147 * CVE-2026-79149 * CVE-2026-79188 * CVE-2026-79189 * CVE-2026-7920 * CVE-2026-79229 * CVE-2026-7923 * CVE-2026-79269 * CVE-2026-79270 * CVE-2026-79275 * CVE-2026-7942 * CVE-2026-7943 * CVE-2026-7949 * CVE-2026-83596 * CVE-2026-84635 * CVE-2026-8579 * CVE-2026-86898 * CVE-2026-9877 * CVE-2026-9878 * CVE-2026-9879 * CVE-2026-9882 * CVE-2026-9893 * CVE-2026-9899 * CVE-2026-9900 * CVE-2026-9901 * CVE-2026-9904 * CVE-2026-9908 * CVE-2026-9909 * CVE-2026-9910 * CVE-2026-9911 * CVE-2026-9913 * CVE-2026-9914 * CVE-2026-9915 * CVE-2026-9916 * CVE-2026-9923 * CVE-2026-9925 * CVE-2026-9926 * CVE-2026-9927 * CVE-2026-9935 * CVE-2026-9940 * CVE-2026-9941 * CVE-2026-9942 * CVE-2026-9944 * CVE-2026-9946 * CVE-2026-9953 * CVE-2026-9965 * CVE-2026-9969 * CVE-2026-9975 * CVE-2026-9981 * CVE-2026-9982 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2024-1283 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-1283 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-1283 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43091 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43091 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43097 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43097 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43097 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43767 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43767 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43767 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-43768 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-43768 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-43768 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-7966 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-7966 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-7966 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8193 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8193 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8198 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8198 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-8636 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-8636 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-9123 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2024-9123 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-0436 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0436 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-0444 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2025-0444 ( SUSE ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-0444 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2025-10502 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-10502 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-10502 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-26416 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-26416 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-26416 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-32318 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-32318 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-48622 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2025-48622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-48622 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-54627 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54627 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-54627 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-6558 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-6558 ( SUSE ): 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2025-6558 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-8901 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-8901 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9478 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-9478 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-0908 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-0908 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10009 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10009 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10011 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10011 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10011 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10012 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10012 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10012 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10018 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10018 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10018 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10019 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10019 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10019 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10019 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-10881 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10881 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10881 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10883 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10883 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10883 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10889 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10889 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10889 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10907 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10907 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10907 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10919 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10919 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10919 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-10941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-10974 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-10974 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10974 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-10977 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10977 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10977 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10979 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10979 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10985 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10985 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10993 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10993 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-10994 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-10994 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11004 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11004 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11024 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11024 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11024 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11039 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11039 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11039 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11040 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11040 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11040 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11051 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11051 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11051 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11057 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11057 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11061 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11061 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11061 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11065 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11065 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11066 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11066 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11087 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11087 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11087 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11088 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11088 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11088 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11090 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11090 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11090 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11104 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11104 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11110 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11110 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11111 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-11111 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11111 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-11113 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11113 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11113 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11121 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11121 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11121 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11123 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11123 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11124 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11124 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11124 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11137 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11137 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11137 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11138 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11138 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-11159 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11159 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11159 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11191 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-11191 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11191 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-11663 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-11663 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11663 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-11675 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-11675 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-11675 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-13780 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13780 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13780 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13781 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13781 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13834 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13834 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13841 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13841 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13859 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13859 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13877 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13877 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13877 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13883 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-13883 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13883 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-13971 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-13971 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-13971 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14044 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14044 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14044 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14125 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14125 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14125 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14152 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14152 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14152 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14382 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14382 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14386 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14386 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14386 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14387 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14387 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14387 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14388 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14388 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14388 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14389 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14389 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14389 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14390 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14390 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14396 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14396 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14396 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14398 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14398 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14398 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14400 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14400 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14410 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-14410 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14410 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-14411 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14411 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14411 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14412 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14412 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14414 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14414 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14414 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-14418 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-14418 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14418 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-14419 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14419 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14419 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14425 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14425 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14427 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14427 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-14429 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-14429 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15109 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15109 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15109 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-15766 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15766 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-15774 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-15774 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-15774 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-16413 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16413 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-16417 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-16417 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-16417 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17653 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17653 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17653 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17655 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17655 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17667 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17667 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17667 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17668 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17668 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17671 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17671 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17671 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17675 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17675 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17678 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-17678 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17678 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-17682 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17682 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17682 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17683 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17683 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17683 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17687 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17687 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17687 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17689 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17689 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17689 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17697 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17697 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17697 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17702 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17702 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17702 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17704 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17704 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17704 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17714 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17717 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17717 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17717 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17718 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17718 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17721 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17721 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17740 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17740 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17740 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17745 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17745 ( SUSE ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17745 ( NVD ): 5.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2026-17750 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17750 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-17757 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17757 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17757 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17771 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17771 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17785 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17785 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-17801 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17801 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17801 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17832 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17832 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-17847 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17847 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-17914 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-17914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-17914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-19160 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19160 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19160 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-19161 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19161 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-19173 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-19173 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19173 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-19176 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3536 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3536 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3538 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3538 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3909 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3909 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-3931 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-3931 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43670 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43670 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4448 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4448 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4460 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4460 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-4464 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-4464 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-5283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-5870 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-5870 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-5870 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-6296 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-6296 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6296 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-6298 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6298 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6298 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-6364 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-6364 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-6364 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64753 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64753 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64753 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-64778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-64779 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64779 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64779 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64780 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64780 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64781 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64781 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64782 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64782 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-64784 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-64784 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65331 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65331 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65332 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65332 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65333 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65333 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65334 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65334 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65336 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65336 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65337 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65338 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65338 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65340 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65340 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65341 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-65341 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65341 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-65351 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-65351 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65351 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-7353 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7353 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7353 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7354 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7354 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7354 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-7359 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-7359 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-76041 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-76041 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-76041 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78376 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78376 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78376 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78904 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-78904 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78904 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-78905 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78905 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78905 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78906 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78914 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78914 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-78958 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78958 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78958 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-78965 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-78965 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79020 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79020 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79020 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-79043 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79043 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79043 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79112 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79112 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79112 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79118 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79118 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79118 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79120 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79120 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79120 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79127 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79127 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79127 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79130 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79130 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79130 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79131 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79131 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79144 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79144 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79144 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79147 ( SUSE ): 5.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79147 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79147 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79149 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79149 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79149 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79188 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79188 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79189 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79189 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7920 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7920 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79229 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79229 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79229 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-7923 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-7923 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7923 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79269 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79269 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79269 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-79270 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-79270 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79270 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-79275 ( SUSE ): 9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79275 ( SUSE ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-79275 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-7942 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7942 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7942 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7943 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-7943 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7943 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-7949 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-7949 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-7949 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-83596 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-84635 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84635 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-84635 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8579 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-8579 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-8579 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-86898 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86898 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-86898 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-9877 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9877 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9877 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9878 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9878 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9878 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9879 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9879 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9882 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9882 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9882 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9882 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9893 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9893 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9893 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9899 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9899 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9900 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9900 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9901 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9901 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9901 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9904 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9904 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9904 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9908 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9908 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9908 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9910 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9910 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9911 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9911 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9911 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9913 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9913 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9914 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9914 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9914 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9915 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9915 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9916 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9916 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9923 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9923 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9923 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9925 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9925 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9925 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9926 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9926 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9927 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9927 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9927 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9935 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9935 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9935 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9940 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9940 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9940 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9941 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9941 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9942 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-9942 ( SUSE ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9942 ( NVD ): 5.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-9944 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9944 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9944 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-9946 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9946 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9946 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9953 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9953 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9953 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9965 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9965 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9965 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9969 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9969 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9975 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9975 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9975 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9981 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-9981 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9981 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-9982 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9982 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9982 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 237 vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Security issues fixed: WebKitGTK and WPE WebKit Security Advisory WSA-2026-0006 (bsc#1284619): * CVE-2024-1283: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-43091: Out of bounds write due to an integer overflow in filterMask of SkEmbossMaskFilter.cpp could lead to remote code execution. * CVE-2024-43097: Out of bounds write due to an integer overflow in resizeToAtLeast of SkRegion.cpp could lead to local escalation of privilege. * CVE-2024-43767: Heap overflow due to improper input validation in prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp could lead to remote code execution. * CVE-2024-43768: Out of bounds write due to an integer overflow in skia_alloc_func of SkDeflate.cpp could lead to local escalation of privilege. * CVE-2024-7966: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. * CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. * CVE-2024-9123: Integer overflow in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. * CVE-2025-0436: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-0444: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2025-10502: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. * CVE-2025-26416: Out of bounds write due to a heap buffer overflow in initializeSwizzler of SkBmpStandardCodec.cpp could lead to remote escalation of privilege. * CVE-2025-32318: Out of bounds write due to a heap buffer overflow in Skia could lead to remote escalation of privilege. * CVE-2025-48622: Out of bounds read due to a buffer overflow in ProcessArea of dng_misc_opcodes.cpp could lead to local information disclosure. * CVE-2025-54627: An out-of-bounds write vulnerability in the skia module may affect service confidentiality upon successful exploitation. * CVE-2025-8901: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2025-9478: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-0908: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10009: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10011: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10012: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10018: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10019: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10881: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10889: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10907: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-10919: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10941: Out of bounds memory access in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-10974: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-10977: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-10979: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10985: Out of bounds read in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-10993: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-10994: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11004: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11024: Stack buffer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. * CVE-2026-11039: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11040: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11051: Out of bounds read in ANGLE in Google Chrome on Linux allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11057: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11061: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11065: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11066: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11087: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11088: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11090: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11104: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11110: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11111: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-11113: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11121: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-11123: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11124: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-11137: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-11138: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11159: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-11191: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-11663: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-11675: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-13780: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13781: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13834: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13841: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13859: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13877: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-13883: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-13971: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14044: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14125: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14152: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14382: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14386: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14387: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14388: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14389: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14390: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14396: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14398: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14400: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14410: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. * CVE-2026-14411: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14412: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14413: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14414: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-14418: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-14419: Use after free in Skia in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14425: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14427: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-14429: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-15109: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15766: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-15774: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16413: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-16417: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17653: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17667: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17668: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17675: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17678: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17682: Integer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17683: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17687: Type Confusion in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17689: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17697: Type Confusion in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17702: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-17704: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17714: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-17717: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17718: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17721: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17740: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17745: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17750: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17757: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17771: Uninitialized Use in Skia in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17785: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-17801: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17832: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17847: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-17914: Side-channel information leakage in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-19160: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19161: Uninitialized Use in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-19173: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-19176: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-3536: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3538: Integer overflow in Skia in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-3909: Out of bounds write in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-3931: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. * CVE-2026-43670: A Content Security Policy bypass in AudioWorklet contexts that allowed processing maliciously crafted web content was addressed with improved enforcement. * CVE-2026-4448: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-4460: Out of bounds read in Skia in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-4464: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-5283: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-5870: Integer overflow in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-6298: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-6364: Out of bounds read in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted file. * CVE-2026-64715: A use-after-free issue that may lead to an unexpected process crash when processing maliciously crafted web content was addressed with improved memory management. * CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). * CVE-2026-64753: A permissions issue that may disclose sensitive user information when processing maliciously crafted web content was addressed by removing the vulnerable code. * CVE-2026-64778: A vulnerability that may leak sensitive data when visiting a maliciously crafted website was addressed with improved checks. * CVE-2026-64779: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64780: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved checks. * CVE-2026-64781: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved input validation. * CVE-2026-64782: A memory corruption vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved locking. * CVE-2026-64784: An out-of-bounds access issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved bounds checking. * CVE-2026-65331: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65332: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65333: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65334: A memory corruption issue that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-65336: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65337: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65338: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65340: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-65341: A vulnerability that may lead to memory corruption when processing maliciously crafted web content was addressed with improved memory handling. * CVE-2026-65351: A vulnerability that may lead to an unexpected crash when processing maliciously crafted web content was addressed through improved state management. * CVE-2026-7353: Heap buffer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7354: Out of bounds read and write in Angle in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-7359: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-76041: Information leak in Skia in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-78376: use-after-free of `JSCValue` function parameters (bsc#1276418). * CVE-2026-78904: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78905: Type confusion in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78906: Race condition in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-78914: Uninitialized resource in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. * CVE-2026-78958: Uninitialized resource in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-78965: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-7900: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79020: Out of bounds read in Skia in Google Chrome allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. * CVE-2026-79043: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79112: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory inside the sandbox via a crafted HTML page. * CVE-2026-79118: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79120: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. * CVE-2026-79127: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79130: Buffer overflow in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79131: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79144: Information leak in Skia in Google Chrome allowed a remote attacker to obtain cross-origin data via a crafted HTML page. * CVE-2026-79147: Information leak in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially obtain sensitive information via a crafted HTML page. * CVE-2026-79149: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79188: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-79189: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7920: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79229: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. * CVE-2026-7923: Out of bounds write in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-79269: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. * CVE-2026-79270: Uninitialized resource in ANGLE in Google Chrome allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. * CVE-2026-79275: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. * CVE-2026-7942: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-7943: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. * CVE-2026-7949: Out of bounds read in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. * CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755). * CVE-2026-84635: A logic issue that may lead to an unexpected process termination when processing maliciously crafted web content was addressed with improved state management. * CVE-2026-8579: Insufficient validation of untrusted input in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted print file. * CVE-2026-86898: A logic issue that may lead to universal cross-site scripting when opening a maliciously crafted webarchive file was addressed with improved state management. * CVE-2026-9877: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9878: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9879: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9882: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9893: Use after free in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9899: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9900: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9901: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. * CVE-2026-9904: Use after free in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9908: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9909: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9910: Out of bounds memory access in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9911: Integer overflow in ANGLE in Google Chrome allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. * CVE-2026-9913: Inappropriate implementation in ANGLE in Google Chrome allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. * CVE-2026-9914: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9915: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9916: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9923: Use after free in Skia in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9925: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9926: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9927: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9935: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page. * CVE-2026-9940: Heap buffer overflow in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9941: Use after free in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9942: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. * CVE-2026-9944: Uninitialized Use in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. * CVE-2026-9946: Use after free in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9953: Out of bounds read in ANGLE in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9965: Out of bounds write in ANGLE in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. * CVE-2026-9969: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to execute arbitrary code via a crafted HTML page. * CVE-2026-9975: Out of bounds read and write in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9981: Inappropriate implementation in Skia in Google Chrome allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. * CVE-2026-9982: Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. * CVE-2026-9983: Type Confusion in Skia in Google Chrome allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. * CVE-2026-9998: Integer overflow in Skia in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Changes for webkit2gtk3: * Update to version 2.54.1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4858 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4858 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4858 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4858 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4858 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4858 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-minibrowser-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * webkit2gtk4-minibrowser-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * webkit-jsc-6.0-debuginfo-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * webkit-jsc-4.1-debuginfo-2.54.1-150600.12.81.3 * webkit-jsc-4-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit-jsc-4-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkit-jsc-4.1-2.54.1-150600.12.81.3 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk3-minibrowser-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * webkit-jsc-6.0-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (x86_64) * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_1-0-32bit-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-32bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150600.12.81.4 * openSUSE Leap 15.6 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-64bit-2.54.1-150600.12.81.4 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150600.12.81.3 * openSUSE Leap 15.6 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * Basesystem Module 15-SP7 (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * Desktop Applications Module 15-SP7 (noarch) * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150600.12.81.4 * webkit2gtk3-soup2-devel-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_1-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150600.12.81.3 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150600.12.81.3 * webkit2gtk3-soup2-debugsource-2.54.1-150600.12.81.4 * webkit2gtk3-debugsource-2.54.1-150600.12.81.3 * libwebkit2gtk-4_1-0-2.54.1-150600.12.81.3 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150600.12.81.4 * webkit2gtk-4_0-injected-bundles-2.54.1-150600.12.81.4 * libjavascriptcoregtk-6_0-1-2.54.1-150600.12.81.4 * typelib-1_0-WebKit-6_0-2.54.1-150600.12.81.4 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150600.12.81.4 * webkit2gtk3-devel-2.54.1-150600.12.81.3 * webkit2gtk4-devel-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150600.12.81.4 * libjavascriptcoregtk-4_1-0-2.54.1-150600.12.81.3 * libwebkit2gtk-4_0-37-2.54.1-150600.12.81.4 * typelib-1_0-WebKit2-4_0-2.54.1-150600.12.81.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150600.12.81.4 * webkit2gtk4-debugsource-2.54.1-150600.12.81.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * typelib-1_0-JavaScriptCore-4_1-2.54.1-150600.12.81.3 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150600.12.81.3 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150600.12.81.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150600.12.81.4 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * WebKitGTK-4.0-lang-2.54.1-150600.12.81.4 * WebKitGTK-4.1-lang-2.54.1-150600.12.81.3 * WebKitGTK-6.0-lang-2.54.1-150600.12.81.4 ## References: * https://www.suse.com/security/cve/CVE-2024-1283.html * https://www.suse.com/security/cve/CVE-2024-43091.html * https://www.suse.com/security/cve/CVE-2024-43097.html * https://www.suse.com/security/cve/CVE-2024-43767.html * https://www.suse.com/security/cve/CVE-2024-43768.html * https://www.suse.com/security/cve/CVE-2024-7966.html * https://www.suse.com/security/cve/CVE-2024-8193.html * https://www.suse.com/security/cve/CVE-2024-8198.html * https://www.suse.com/security/cve/CVE-2024-8636.html * https://www.suse.com/security/cve/CVE-2024-9123.html * https://www.suse.com/security/cve/CVE-2025-0436.html * https://www.suse.com/security/cve/CVE-2025-0444.html * https://www.suse.com/security/cve/CVE-2025-10502.html * https://www.suse.com/security/cve/CVE-2025-26416.html * https://www.suse.com/security/cve/CVE-2025-32318.html * https://www.suse.com/security/cve/CVE-2025-48622.html * https://www.suse.com/security/cve/CVE-2025-54627.html * https://www.suse.com/security/cve/CVE-2025-6558.html * https://www.suse.com/security/cve/CVE-2025-8901.html * https://www.suse.com/security/cve/CVE-2025-9478.html * https://www.suse.com/security/cve/CVE-2026-0908.html * https://www.suse.com/security/cve/CVE-2026-10009.html * https://www.suse.com/security/cve/CVE-2026-10011.html * https://www.suse.com/security/cve/CVE-2026-10012.html * https://www.suse.com/security/cve/CVE-2026-10018.html * https://www.suse.com/security/cve/CVE-2026-10019.html * https://www.suse.com/security/cve/CVE-2026-10881.html * https://www.suse.com/security/cve/CVE-2026-10883.html * https://www.suse.com/security/cve/CVE-2026-10889.html * https://www.suse.com/security/cve/CVE-2026-10907.html * https://www.suse.com/security/cve/CVE-2026-10919.html * https://www.suse.com/security/cve/CVE-2026-10941.html * https://www.suse.com/security/cve/CVE-2026-10974.html * https://www.suse.com/security/cve/CVE-2026-10977.html * https://www.suse.com/security/cve/CVE-2026-10979.html * https://www.suse.com/security/cve/CVE-2026-10985.html * https://www.suse.com/security/cve/CVE-2026-10993.html * https://www.suse.com/security/cve/CVE-2026-10994.html * https://www.suse.com/security/cve/CVE-2026-11004.html * https://www.suse.com/security/cve/CVE-2026-11024.html * https://www.suse.com/security/cve/CVE-2026-11039.html * https://www.suse.com/security/cve/CVE-2026-11040.html * https://www.suse.com/security/cve/CVE-2026-11051.html * https://www.suse.com/security/cve/CVE-2026-11057.html * https://www.suse.com/security/cve/CVE-2026-11061.html * https://www.suse.com/security/cve/CVE-2026-11065.html * https://www.suse.com/security/cve/CVE-2026-11066.html * https://www.suse.com/security/cve/CVE-2026-11087.html * https://www.suse.com/security/cve/CVE-2026-11088.html * https://www.suse.com/security/cve/CVE-2026-11090.html * https://www.suse.com/security/cve/CVE-2026-11104.html * https://www.suse.com/security/cve/CVE-2026-11109.html * https://www.suse.com/security/cve/CVE-2026-11110.html * https://www.suse.com/security/cve/CVE-2026-11111.html * https://www.suse.com/security/cve/CVE-2026-11113.html * https://www.suse.com/security/cve/CVE-2026-11121.html * https://www.suse.com/security/cve/CVE-2026-11123.html * https://www.suse.com/security/cve/CVE-2026-11124.html * https://www.suse.com/security/cve/CVE-2026-11137.html * https://www.suse.com/security/cve/CVE-2026-11138.html * https://www.suse.com/security/cve/CVE-2026-11159.html * https://www.suse.com/security/cve/CVE-2026-11191.html * https://www.suse.com/security/cve/CVE-2026-11663.html * https://www.suse.com/security/cve/CVE-2026-11675.html * https://www.suse.com/security/cve/CVE-2026-13780.html * https://www.suse.com/security/cve/CVE-2026-13781.html * https://www.suse.com/security/cve/CVE-2026-13834.html * https://www.suse.com/security/cve/CVE-2026-13841.html * https://www.suse.com/security/cve/CVE-2026-13859.html * https://www.suse.com/security/cve/CVE-2026-13877.html * https://www.suse.com/security/cve/CVE-2026-13883.html * https://www.suse.com/security/cve/CVE-2026-13971.html * https://www.suse.com/security/cve/CVE-2026-14044.html * https://www.suse.com/security/cve/CVE-2026-14125.html * https://www.suse.com/security/cve/CVE-2026-14152.html * https://www.suse.com/security/cve/CVE-2026-14382.html * https://www.suse.com/security/cve/CVE-2026-14386.html * https://www.suse.com/security/cve/CVE-2026-14387.html * https://www.suse.com/security/cve/CVE-2026-14388.html * https://www.suse.com/security/cve/CVE-2026-14389.html * https://www.suse.com/security/cve/CVE-2026-14390.html * https://www.suse.com/security/cve/CVE-2026-14396.html * https://www.suse.com/security/cve/CVE-2026-14398.html * https://www.suse.com/security/cve/CVE-2026-14400.html * https://www.suse.com/security/cve/CVE-2026-14410.html * https://www.suse.com/security/cve/CVE-2026-14411.html * https://www.suse.com/security/cve/CVE-2026-14412.html * https://www.suse.com/security/cve/CVE-2026-14413.html * https://www.suse.com/security/cve/CVE-2026-14414.html * https://www.suse.com/security/cve/CVE-2026-14418.html * https://www.suse.com/security/cve/CVE-2026-14419.html * https://www.suse.com/security/cve/CVE-2026-14425.html * https://www.suse.com/security/cve/CVE-2026-14427.html * https://www.suse.com/security/cve/CVE-2026-14429.html * https://www.suse.com/security/cve/CVE-2026-15109.html * https://www.suse.com/security/cve/CVE-2026-15766.html * https://www.suse.com/security/cve/CVE-2026-15774.html * https://www.suse.com/security/cve/CVE-2026-16413.html * https://www.suse.com/security/cve/CVE-2026-16417.html * https://www.suse.com/security/cve/CVE-2026-17653.html * https://www.suse.com/security/cve/CVE-2026-17655.html * https://www.suse.com/security/cve/CVE-2026-17667.html * https://www.suse.com/security/cve/CVE-2026-17668.html * https://www.suse.com/security/cve/CVE-2026-17671.html * https://www.suse.com/security/cve/CVE-2026-17675.html * https://www.suse.com/security/cve/CVE-2026-17678.html * https://www.suse.com/security/cve/CVE-2026-17682.html * https://www.suse.com/security/cve/CVE-2026-17683.html * https://www.suse.com/security/cve/CVE-2026-17687.html * https://www.suse.com/security/cve/CVE-2026-17689.html * https://www.suse.com/security/cve/CVE-2026-17697.html * https://www.suse.com/security/cve/CVE-2026-17702.html * https://www.suse.com/security/cve/CVE-2026-17704.html * https://www.suse.com/security/cve/CVE-2026-17714.html * https://www.suse.com/security/cve/CVE-2026-17717.html * https://www.suse.com/security/cve/CVE-2026-17718.html * https://www.suse.com/security/cve/CVE-2026-17721.html * https://www.suse.com/security/cve/CVE-2026-17740.html * https://www.suse.com/security/cve/CVE-2026-17745.html * https://www.suse.com/security/cve/CVE-2026-17750.html * https://www.suse.com/security/cve/CVE-2026-17757.html * https://www.suse.com/security/cve/CVE-2026-17771.html * https://www.suse.com/security/cve/CVE-2026-17785.html * https://www.suse.com/security/cve/CVE-2026-17801.html * https://www.suse.com/security/cve/CVE-2026-17832.html * https://www.suse.com/security/cve/CVE-2026-17847.html * https://www.suse.com/security/cve/CVE-2026-17914.html * https://www.suse.com/security/cve/CVE-2026-19160.html * https://www.suse.com/security/cve/CVE-2026-19161.html * https://www.suse.com/security/cve/CVE-2026-19173.html * https://www.suse.com/security/cve/CVE-2026-19176.html * https://www.suse.com/security/cve/CVE-2026-3536.html * https://www.suse.com/security/cve/CVE-2026-3538.html * https://www.suse.com/security/cve/CVE-2026-3909.html * https://www.suse.com/security/cve/CVE-2026-3931.html * https://www.suse.com/security/cve/CVE-2026-43670.html * https://www.suse.com/security/cve/CVE-2026-4448.html * https://www.suse.com/security/cve/CVE-2026-4460.html * https://www.suse.com/security/cve/CVE-2026-4464.html * https://www.suse.com/security/cve/CVE-2026-5283.html * https://www.suse.com/security/cve/CVE-2026-5870.html * https://www.suse.com/security/cve/CVE-2026-6296.html * https://www.suse.com/security/cve/CVE-2026-6298.html * https://www.suse.com/security/cve/CVE-2026-6364.html * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64718.html * https://www.suse.com/security/cve/CVE-2026-64753.html * https://www.suse.com/security/cve/CVE-2026-64778.html * https://www.suse.com/security/cve/CVE-2026-64779.html * https://www.suse.com/security/cve/CVE-2026-64780.html * https://www.suse.com/security/cve/CVE-2026-64781.html * https://www.suse.com/security/cve/CVE-2026-64782.html * https://www.suse.com/security/cve/CVE-2026-64784.html * https://www.suse.com/security/cve/CVE-2026-65331.html * https://www.suse.com/security/cve/CVE-2026-65332.html * https://www.suse.com/security/cve/CVE-2026-65333.html * https://www.suse.com/security/cve/CVE-2026-65334.html * https://www.suse.com/security/cve/CVE-2026-65335.html * https://www.suse.com/security/cve/CVE-2026-65336.html * https://www.suse.com/security/cve/CVE-2026-65337.html * https://www.suse.com/security/cve/CVE-2026-65338.html * https://www.suse.com/security/cve/CVE-2026-65340.html * https://www.suse.com/security/cve/CVE-2026-65341.html * https://www.suse.com/security/cve/CVE-2026-65351.html * https://www.suse.com/security/cve/CVE-2026-7353.html * https://www.suse.com/security/cve/CVE-2026-7354.html * https://www.suse.com/security/cve/CVE-2026-7359.html * https://www.suse.com/security/cve/CVE-2026-76041.html * https://www.suse.com/security/cve/CVE-2026-78376.html * https://www.suse.com/security/cve/CVE-2026-78904.html * https://www.suse.com/security/cve/CVE-2026-78905.html * https://www.suse.com/security/cve/CVE-2026-78906.html * https://www.suse.com/security/cve/CVE-2026-78914.html * https://www.suse.com/security/cve/CVE-2026-78958.html * https://www.suse.com/security/cve/CVE-2026-78965.html * https://www.suse.com/security/cve/CVE-2026-7900.html * https://www.suse.com/security/cve/CVE-2026-79020.html * https://www.suse.com/security/cve/CVE-2026-79043.html * https://www.suse.com/security/cve/CVE-2026-79112.html * https://www.suse.com/security/cve/CVE-2026-79118.html * https://www.suse.com/security/cve/CVE-2026-79120.html * https://www.suse.com/security/cve/CVE-2026-79127.html * https://www.suse.com/security/cve/CVE-2026-79130.html * https://www.suse.com/security/cve/CVE-2026-79131.html * https://www.suse.com/security/cve/CVE-2026-79144.html * https://www.suse.com/security/cve/CVE-2026-79147.html * https://www.suse.com/security/cve/CVE-2026-79149.html * https://www.suse.com/security/cve/CVE-2026-79188.html * https://www.suse.com/security/cve/CVE-2026-79189.html * https://www.suse.com/security/cve/CVE-2026-7920.html * https://www.suse.com/security/cve/CVE-2026-79229.html * https://www.suse.com/security/cve/CVE-2026-7923.html * https://www.suse.com/security/cve/CVE-2026-79269.html * https://www.suse.com/security/cve/CVE-2026-79270.html * https://www.suse.com/security/cve/CVE-2026-79275.html * https://www.suse.com/security/cve/CVE-2026-7942.html * https://www.suse.com/security/cve/CVE-2026-7943.html * https://www.suse.com/security/cve/CVE-2026-7949.html * https://www.suse.com/security/cve/CVE-2026-83596.html * https://www.suse.com/security/cve/CVE-2026-84635.html * https://www.suse.com/security/cve/CVE-2026-8579.html * https://www.suse.com/security/cve/CVE-2026-86898.html * https://www.suse.com/security/cve/CVE-2026-9877.html * https://www.suse.com/security/cve/CVE-2026-9878.html * https://www.suse.com/security/cve/CVE-2026-9879.html * https://www.suse.com/security/cve/CVE-2026-9882.html * https://www.suse.com/security/cve/CVE-2026-9893.html * https://www.suse.com/security/cve/CVE-2026-9899.html * https://www.suse.com/security/cve/CVE-2026-9900.html * https://www.suse.com/security/cve/CVE-2026-9901.html * https://www.suse.com/security/cve/CVE-2026-9904.html * https://www.suse.com/security/cve/CVE-2026-9908.html * https://www.suse.com/security/cve/CVE-2026-9909.html * https://www.suse.com/security/cve/CVE-2026-9910.html * https://www.suse.com/security/cve/CVE-2026-9911.html * https://www.suse.com/security/cve/CVE-2026-9913.html * https://www.suse.com/security/cve/CVE-2026-9914.html * https://www.suse.com/security/cve/CVE-2026-9915.html * https://www.suse.com/security/cve/CVE-2026-9916.html * https://www.suse.com/security/cve/CVE-2026-9923.html * https://www.suse.com/security/cve/CVE-2026-9925.html * https://www.suse.com/security/cve/CVE-2026-9926.html * https://www.suse.com/security/cve/CVE-2026-9927.html * https://www.suse.com/security/cve/CVE-2026-9935.html * https://www.suse.com/security/cve/CVE-2026-9940.html * https://www.suse.com/security/cve/CVE-2026-9941.html * https://www.suse.com/security/cve/CVE-2026-9942.html * https://www.suse.com/security/cve/CVE-2026-9944.html * https://www.suse.com/security/cve/CVE-2026-9946.html * https://www.suse.com/security/cve/CVE-2026-9953.html * https://www.suse.com/security/cve/CVE-2026-9965.html * https://www.suse.com/security/cve/CVE-2026-9969.html * https://www.suse.com/security/cve/CVE-2026-9975.html * https://www.suse.com/security/cve/CVE-2026-9981.html * https://www.suse.com/security/cve/CVE-2026-9982.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1276418 * https://bugzilla.suse.com/show_bug.cgi?id=1277001 * https://bugzilla.suse.com/show_bug.cgi?id=1277004 * https://bugzilla.suse.com/show_bug.cgi?id=1277005 * https://bugzilla.suse.com/show_bug.cgi?id=1277006 * https://bugzilla.suse.com/show_bug.cgi?id=1277007 * https://bugzilla.suse.com/show_bug.cgi?id=1277009 * https://bugzilla.suse.com/show_bug.cgi?id=1277010 * https://bugzilla.suse.com/show_bug.cgi?id=1277011 * https://bugzilla.suse.com/show_bug.cgi?id=1277012 * https://bugzilla.suse.com/show_bug.cgi?id=1277013 * https://bugzilla.suse.com/show_bug.cgi?id=1277014 * https://bugzilla.suse.com/show_bug.cgi?id=1277015 * https://bugzilla.suse.com/show_bug.cgi?id=1277016 * https://bugzilla.suse.com/show_bug.cgi?id=1277017 * https://bugzilla.suse.com/show_bug.cgi?id=1277018 * https://bugzilla.suse.com/show_bug.cgi?id=1277755 * https://bugzilla.suse.com/show_bug.cgi?id=1281116 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 * https://bugzilla.suse.com/show_bug.cgi?id=1285528 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 16:31:10 -0000 Subject: SUSE-SU-2026:4857-1: important: Security update for mutt Message-ID: <179268667066.8348.6557181630545300448@8741a845db10> # Security update for mutt Announcement ID: SUSE-SU-2026:4857-1 Release Date: 2026-10-22T09:56:58Z Rating: important References: * bsc#1284739 Cross-References: * CVE-2026-107570 CVSS scores: * CVE-2026-107570 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-107570 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107570 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for mutt fixes the following issue: * CVE-2026-107570: heap out-of-bounds write in `convert_file_from_to()` via a crafted `Content-Type` header (bsc#1284739). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4857 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4857 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4857 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4857 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * openSUSE Leap 15.6 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * Basesystem Module 15-SP7 (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * mutt-debugsource-2.2.14-150600.3.9.1 * mutt-2.2.14-150600.3.9.1 * mutt-debuginfo-2.2.14-150600.3.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * mutt-doc-2.2.14-150600.3.9.1 * mutt-lang-2.2.14-150600.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107570.html * https://bugzilla.suse.com/show_bug.cgi?id=1284739 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 16:31:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 16:31:17 -0000 Subject: SUSE-SU-2026:4854-1: important: Security update for podman Message-ID: <179268667771.8348.2926903789584306285@8741a845db10> # Security update for podman Announcement ID: SUSE-SU-2026:4854-1 Release Date: 2026-10-22T08:30:26Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4854 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4854 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4854 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4854 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4854 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4854 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4854 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4854 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4854 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.84.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * Containers Module 15-SP7 (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * podman-docker-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150500.3.84.1 * podman-remote-4.9.5-150500.3.84.1 * podman-debuginfo-4.9.5-150500.3.84.1 * podmansh-4.9.5-150500.3.84.1 * podman-remote-debuginfo-4.9.5-150500.3.84.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * podman-docker-4.9.5-150500.3.84.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:30:31 -0000 Subject: SUSE-SU-2026:24271-1: important: Security update for php8 Message-ID: <179270103140.838.472277564212597581@8741a845db10> # Security update for php8 Announcement ID: SUSE-SU-2026:24271-1 Release Date: 2026-10-21T17:04:21Z Rating: important References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for php8 fixes the following issue: Update to php 8.4.27: * CVE-2026-109618,CVE-2026-109619: memory corruption leading to RCE (bsc#1286027). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1955 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1955 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * php8-sysvshm-8.4.27-160000.1.1 * php8-iconv-debuginfo-8.4.27-160000.1.1 * php8-dom-debuginfo-8.4.27-160000.1.1 * php8-xsl-8.4.27-160000.1.1 * php8-ctype-debuginfo-8.4.27-160000.1.1 * php8-dom-8.4.27-160000.1.1 * php8-gettext-debuginfo-8.4.27-160000.1.1 * php8-ldap-debuginfo-8.4.27-160000.1.1 * php8-ftp-8.4.27-160000.1.1 * php8-embed-8.4.27-160000.1.1 * php8-fpm-debuginfo-8.4.27-160000.1.1 * php8-exif-8.4.27-160000.1.1 * php8-ffi-debuginfo-8.4.27-160000.1.1 * php8-tidy-8.4.27-160000.1.1 * php8-sysvmsg-debuginfo-8.4.27-160000.1.1 * php8-gmp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debugsource-8.4.27-160000.1.1 * php8-fastcgi-debugsource-8.4.27-160000.1.1 * php8-sysvmsg-8.4.27-160000.1.1 * php8-ctype-8.4.27-160000.1.1 * php8-enchant-debuginfo-8.4.27-160000.1.1 * php8-mbstring-8.4.27-160000.1.1 * php8-zip-8.4.27-160000.1.1 * php8-embed-debugsource-8.4.27-160000.1.1 * php8-ldap-8.4.27-160000.1.1 * php8-iconv-8.4.27-160000.1.1 * php8-shmop-8.4.27-160000.1.1 * php8-exif-debuginfo-8.4.27-160000.1.1 * php8-fastcgi-debuginfo-8.4.27-160000.1.1 * php8-tidy-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-8.4.27-160000.1.1 * php8-enchant-8.4.27-160000.1.1 * php8-tokenizer-debuginfo-8.4.27-160000.1.1 * php8-bz2-8.4.27-160000.1.1 * php8-fpm-debugsource-8.4.27-160000.1.1 * php8-gettext-8.4.27-160000.1.1 * php8-sqlite-8.4.27-160000.1.1 * php8-fpm-8.4.27-160000.1.1 * php8-fileinfo-8.4.27-160000.1.1 * php8-intl-8.4.27-160000.1.1 * php8-readline-8.4.27-160000.1.1 * php8-calendar-8.4.27-160000.1.1 * php8-sockets-8.4.27-160000.1.1 * php8-ffi-8.4.27-160000.1.1 * php8-sodium-debuginfo-8.4.27-160000.1.1 * php8-xsl-debuginfo-8.4.27-160000.1.1 * php8-curl-8.4.27-160000.1.1 * php8-ftp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debuginfo-8.4.27-160000.1.1 * php8-gd-debuginfo-8.4.27-160000.1.1 * php8-bcmath-8.4.27-160000.1.1 * php8-calendar-debuginfo-8.4.27-160000.1.1 * php8-opcache-8.4.27-160000.1.1 * php8-fastcgi-8.4.27-160000.1.1 * php8-sysvsem-8.4.27-160000.1.1 * php8-snmp-8.4.27-160000.1.1 * php8-soap-debuginfo-8.4.27-160000.1.1 * php8-shmop-debuginfo-8.4.27-160000.1.1 * php8-openssl-debuginfo-8.4.27-160000.1.1 * php8-zlib-8.4.27-160000.1.1 * php8-mysql-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-debuginfo-8.4.27-160000.1.1 * php8-zip-debuginfo-8.4.27-160000.1.1 * php8-posix-8.4.27-160000.1.1 * php8-dba-8.4.27-160000.1.1 * apache2-mod_php8-8.4.27-160000.1.1 * php8-gmp-8.4.27-160000.1.1 * php8-phar-debuginfo-8.4.27-160000.1.1 * php8-devel-8.4.27-160000.1.1 * php8-pdo-8.4.27-160000.1.1 * php8-fileinfo-debuginfo-8.4.27-160000.1.1 * php8-curl-debuginfo-8.4.27-160000.1.1 * php8-zlib-debuginfo-8.4.27-160000.1.1 * php8-snmp-debuginfo-8.4.27-160000.1.1 * php8-sqlite-debuginfo-8.4.27-160000.1.1 * php8-bz2-debuginfo-8.4.27-160000.1.1 * php8-pcntl-8.4.27-160000.1.1 * php8-debuginfo-8.4.27-160000.1.1 * php8-pcntl-debuginfo-8.4.27-160000.1.1 * php8-odbc-debuginfo-8.4.27-160000.1.1 * php8-cli-8.4.27-160000.1.1 * php8-dba-debuginfo-8.4.27-160000.1.1 * php8-readline-debuginfo-8.4.27-160000.1.1 * php8-openssl-8.4.27-160000.1.1 * php8-soap-8.4.27-160000.1.1 * php8-pgsql-8.4.27-160000.1.1 * php8-sysvsem-debuginfo-8.4.27-160000.1.1 * php8-opcache-debuginfo-8.4.27-160000.1.1 * php8-mbstring-debuginfo-8.4.27-160000.1.1 * php8-cli-debuginfo-8.4.27-160000.1.1 * php8-8.4.27-160000.1.1 * php8-pdo-debuginfo-8.4.27-160000.1.1 * php8-tokenizer-8.4.27-160000.1.1 * php8-sockets-debuginfo-8.4.27-160000.1.1 * php8-intl-debuginfo-8.4.27-160000.1.1 * php8-gd-8.4.27-160000.1.1 * php8-sysvshm-debuginfo-8.4.27-160000.1.1 * php8-sodium-8.4.27-160000.1.1 * php8-embed-debuginfo-8.4.27-160000.1.1 * php8-phar-8.4.27-160000.1.1 * php8-odbc-8.4.27-160000.1.1 * php8-xmlwriter-8.4.27-160000.1.1 * php8-mysql-8.4.27-160000.1.1 * php8-bcmath-debuginfo-8.4.27-160000.1.1 * php8-posix-debuginfo-8.4.27-160000.1.1 * php8-xmlwriter-debuginfo-8.4.27-160000.1.1 * php8-debugsource-8.4.27-160000.1.1 * php8-pgsql-debuginfo-8.4.27-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * php8-fpm-apache-8.4.27-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * php8-sysvshm-8.4.27-160000.1.1 * php8-iconv-debuginfo-8.4.27-160000.1.1 * php8-dom-debuginfo-8.4.27-160000.1.1 * php8-xsl-8.4.27-160000.1.1 * php8-ctype-debuginfo-8.4.27-160000.1.1 * php8-dom-8.4.27-160000.1.1 * php8-gettext-debuginfo-8.4.27-160000.1.1 * php8-ldap-debuginfo-8.4.27-160000.1.1 * php8-ftp-8.4.27-160000.1.1 * php8-embed-8.4.27-160000.1.1 * php8-fpm-debuginfo-8.4.27-160000.1.1 * php8-exif-8.4.27-160000.1.1 * php8-ffi-debuginfo-8.4.27-160000.1.1 * php8-tidy-8.4.27-160000.1.1 * php8-sysvmsg-debuginfo-8.4.27-160000.1.1 * php8-gmp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debugsource-8.4.27-160000.1.1 * php8-fastcgi-debugsource-8.4.27-160000.1.1 * php8-sysvmsg-8.4.27-160000.1.1 * php8-ctype-8.4.27-160000.1.1 * php8-enchant-debuginfo-8.4.27-160000.1.1 * php8-mbstring-8.4.27-160000.1.1 * php8-zip-8.4.27-160000.1.1 * php8-embed-debugsource-8.4.27-160000.1.1 * php8-ldap-8.4.27-160000.1.1 * php8-iconv-8.4.27-160000.1.1 * php8-shmop-8.4.27-160000.1.1 * php8-exif-debuginfo-8.4.27-160000.1.1 * php8-fastcgi-debuginfo-8.4.27-160000.1.1 * php8-tidy-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-8.4.27-160000.1.1 * php8-enchant-8.4.27-160000.1.1 * php8-tokenizer-debuginfo-8.4.27-160000.1.1 * php8-bz2-8.4.27-160000.1.1 * php8-fpm-debugsource-8.4.27-160000.1.1 * php8-gettext-8.4.27-160000.1.1 * php8-sqlite-8.4.27-160000.1.1 * php8-fpm-8.4.27-160000.1.1 * php8-fileinfo-8.4.27-160000.1.1 * php8-intl-8.4.27-160000.1.1 * php8-readline-8.4.27-160000.1.1 * php8-calendar-8.4.27-160000.1.1 * php8-sockets-8.4.27-160000.1.1 * php8-ffi-8.4.27-160000.1.1 * php8-sodium-debuginfo-8.4.27-160000.1.1 * php8-xsl-debuginfo-8.4.27-160000.1.1 * php8-curl-8.4.27-160000.1.1 * php8-ftp-debuginfo-8.4.27-160000.1.1 * apache2-mod_php8-debuginfo-8.4.27-160000.1.1 * php8-gd-debuginfo-8.4.27-160000.1.1 * php8-bcmath-8.4.27-160000.1.1 * php8-calendar-debuginfo-8.4.27-160000.1.1 * php8-opcache-8.4.27-160000.1.1 * php8-fastcgi-8.4.27-160000.1.1 * php8-sysvsem-8.4.27-160000.1.1 * php8-snmp-8.4.27-160000.1.1 * php8-soap-debuginfo-8.4.27-160000.1.1 * php8-shmop-debuginfo-8.4.27-160000.1.1 * php8-openssl-debuginfo-8.4.27-160000.1.1 * php8-zlib-8.4.27-160000.1.1 * php8-mysql-debuginfo-8.4.27-160000.1.1 * php8-xmlreader-debuginfo-8.4.27-160000.1.1 * php8-zip-debuginfo-8.4.27-160000.1.1 * php8-posix-8.4.27-160000.1.1 * php8-dba-8.4.27-160000.1.1 * apache2-mod_php8-8.4.27-160000.1.1 * php8-gmp-8.4.27-160000.1.1 * php8-phar-debuginfo-8.4.27-160000.1.1 * php8-devel-8.4.27-160000.1.1 * php8-pdo-8.4.27-160000.1.1 * php8-fileinfo-debuginfo-8.4.27-160000.1.1 * php8-curl-debuginfo-8.4.27-160000.1.1 * php8-zlib-debuginfo-8.4.27-160000.1.1 * php8-snmp-debuginfo-8.4.27-160000.1.1 * php8-sqlite-debuginfo-8.4.27-160000.1.1 * php8-bz2-debuginfo-8.4.27-160000.1.1 * php8-pcntl-8.4.27-160000.1.1 * php8-debuginfo-8.4.27-160000.1.1 * php8-pcntl-debuginfo-8.4.27-160000.1.1 * php8-odbc-debuginfo-8.4.27-160000.1.1 * php8-cli-8.4.27-160000.1.1 * php8-dba-debuginfo-8.4.27-160000.1.1 * php8-readline-debuginfo-8.4.27-160000.1.1 * php8-openssl-8.4.27-160000.1.1 * php8-soap-8.4.27-160000.1.1 * php8-pgsql-8.4.27-160000.1.1 * php8-sysvsem-debuginfo-8.4.27-160000.1.1 * php8-opcache-debuginfo-8.4.27-160000.1.1 * php8-mbstring-debuginfo-8.4.27-160000.1.1 * php8-cli-debuginfo-8.4.27-160000.1.1 * php8-8.4.27-160000.1.1 * php8-pdo-debuginfo-8.4.27-160000.1.1 * php8-tokenizer-8.4.27-160000.1.1 * php8-sockets-debuginfo-8.4.27-160000.1.1 * php8-intl-debuginfo-8.4.27-160000.1.1 * php8-gd-8.4.27-160000.1.1 * php8-sysvshm-debuginfo-8.4.27-160000.1.1 * php8-sodium-8.4.27-160000.1.1 * php8-embed-debuginfo-8.4.27-160000.1.1 * php8-phar-8.4.27-160000.1.1 * php8-odbc-8.4.27-160000.1.1 * php8-xmlwriter-8.4.27-160000.1.1 * php8-mysql-8.4.27-160000.1.1 * php8-bcmath-debuginfo-8.4.27-160000.1.1 * php8-posix-debuginfo-8.4.27-160000.1.1 * php8-xmlwriter-debuginfo-8.4.27-160000.1.1 * php8-debugsource-8.4.27-160000.1.1 * php8-pgsql-debuginfo-8.4.27-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * php8-fpm-apache-8.4.27-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:30:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:30:55 -0000 Subject: SUSE-SU-2026:24268-1: moderate: Security update for coreutils Message-ID: <179270105598.838.8804797673759680871@8741a845db10> # Security update for coreutils Announcement ID: SUSE-SU-2026:24268-1 Release Date: 2026-10-21T08:10:35Z Rating: moderate References: * bsc#1272698 Cross-References: * CVE-2026-56391 CVSS scores: * CVE-2026-56391 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-56391 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-56391 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issue: * CVE-2026-56391: uniq: denial of service and information disclosure via out- of-bounds read with multibyte input (bsc#1272698). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1951 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1951 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-single-debuginfo-9.6-160000.3.1 * coreutils-9.6-160000.3.1 * coreutils-single-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-single-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * coreutils-doc-9.6-160000.3.1 * coreutils-lang-9.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-single-debuginfo-9.6-160000.3.1 * coreutils-9.6-160000.3.1 * coreutils-single-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-single-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * coreutils-doc-9.6-160000.3.1 * coreutils-lang-9.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56391.html * https://bugzilla.suse.com/show_bug.cgi?id=1272698 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:31:07 -0000 Subject: SUSE-SU-2026:24267-1: moderate: Security update for python-soupsieve Message-ID: <179270106798.838.2034821644742689513@8741a845db10> # Security update for python-soupsieve Announcement ID: SUSE-SU-2026:24267-1 Release Date: 2026-10-21T07:48:42Z Rating: moderate References: * bsc#1281119 * bsc#1281120 Cross-References: * CVE-2026-85999 * CVE-2026-86000 CVSS scores: * CVE-2026-85999 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85999 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86000 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-86000 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for python-soupsieve fixes the following issues: * CVE-2026-85999: quadratic complexity when running the whitespace/comment trimming regex `RE_WS_END` can lead to DoS (bsc#1281119). * CVE-2026-86000: quadratic complexity when running the `IDENTIFIER` / `VALUE` selector sub-patterns can lead to a DoS (bsc#1281120). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1953 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1953 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * python313-soupsieve-2.6-160000.5.1 * SUSE Linux Enterprise Server 16.0 (noarch) * python313-soupsieve-2.6-160000.5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-85999.html * https://www.suse.com/security/cve/CVE-2026-86000.html * https://bugzilla.suse.com/show_bug.cgi?id=1281119 * https://bugzilla.suse.com/show_bug.cgi?id=1281120 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:31:17 -0000 Subject: SUSE-SU-2026:24266-1: important: Security update for cyrus-sasl Message-ID: <179270107793.838.6120468451933032165@8741a845db10> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24266-1 Release Date: 2026-10-21T05:47:26Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability, contains one feature and has three fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1950 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1950 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cyrus-sasl-gs2-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-scram-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-scram-2.1.28-160000.4.1 * cyrus-sasl-gs2-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-crammd5-2.1.28-160000.4.1 * cyrus-sasl-otp-2.1.28-160000.4.1 * cyrus-sasl-ntlm-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-devel-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-160000.4.1 * cyrus-sasl-otp-debuginfo-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-2.1.28-160000.4.1 * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-gs2-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-scram-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 * cyrus-sasl-crammd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-scram-2.1.28-160000.4.1 * cyrus-sasl-gs2-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-crammd5-2.1.28-160000.4.1 * cyrus-sasl-otp-2.1.28-160000.4.1 * cyrus-sasl-ntlm-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-devel-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debugsource-2.1.28-160000.4.1 * cyrus-sasl-otp-debuginfo-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-ldap-auxprop-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-2.1.28-160000.4.1 * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-ntlm-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-sqlauxprop-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-saslauthd-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-plain-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:31:26 -0000 Subject: SUSE-SU-2026:24265-1: important: Security update for amazon-ecs-init Message-ID: <179270108630.838.13087844260907746954@8741a845db10> # Security update for amazon-ecs-init Announcement ID: SUSE-SU-2026:24265-1 Release Date: 2026-10-20T15:10:57Z Rating: important References: * bsc#1279042 * bsc#1280679 Cross-References: * CVE-2026-84445 * CVE-2026-89090 CVSS scores: * CVE-2026-84445 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-84445 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-84445 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89090 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89090 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-89090 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for amazon-ecs-init fixes the following issues: * CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers (bsc#1279042). * CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate (bsc#1280679). Changes for amazon-ecs-init: * Update to version 1.108.0 * Enhancement - Add ECS-Init install pointer for non-Amazon Linux AMIs to README (#5161) * Enhancement - Remove direct docker run instructions from README (#5160) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.28.1 to 1.33.6 in /ecs-agent, /agent, and /ecs-init (#5159) * Feature - Enable IMDS IAM roles config resolution (#5154) * Enhancement - Bump github.com/containerd/containerd from 1.7.33 to 1.7.36 in /agent (#5155) * Enhancement - Bump github.com/containerd/containerd from 1.7.35 to 1.7.36 in /ecs-init (#5156) * Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.195.0 to 1.334.0 in /ecs-agent and /agent (#5148) * Enhancement - Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /ecs- agent, /ecs-agent/daemonimages/csidriver and /agent (#5153) (bsc#1279042, CVE-2026-84445) * Enhancement - Bump go.opentelemetry.io/otel/exporters/otlp/ otlptrace/otlptracehttp from 1.43.0 to 1.45.0 in /agent (#5141) * Enhancement - IMDS credential scanner/refresher updates (#5145) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1949 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1949 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * amazon-ecs-init-1.108.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * amazon-ecs-init-1.108.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-84445.html * https://www.suse.com/security/cve/CVE-2026-89090.html * https://bugzilla.suse.com/show_bug.cgi?id=1279042 * https://bugzilla.suse.com/show_bug.cgi?id=1280679 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:31:37 -0000 Subject: SUSE-SU-2026:24263-1: important: Security update for guava Message-ID: <179270109773.838.6626282151716647348@8741a845db10> # Security update for guava Announcement ID: SUSE-SU-2026:24263-1 Release Date: 2026-10-20T13:40:00Z Rating: important References: * bsc#1284985 Cross-References: * CVE-2026-102554 CVSS scores: * CVE-2026-102554 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102554 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102554 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for guava fixes the following issue: * CVE-2026-102554: Allocation of resources without limits or throttling (CWE-770) during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError (bsc#1284985). Changes for guava: * Adapt the generated OSGi data to reality * Upgrade to guava 33.7.2 * Changes of 33.7.2 * collect: Changed MapMaker, CompactHashMap, and CompactHashSet deserialization to avoid eagerly allocating as much memory as a serialization payload requests (bsc#1284985, CVE-2026-102554) * Changes of 33.7.1 * removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. * Changes of 33.7.0 * Guava module-info.class is now present at the root of the jar instead of under a multi-release root. This prevents the jar from containing a file at META-INF/versions/9/OSGI-INF/ /MANIFEST.MF, which occasionally causes trouble for some users * collect: Changed some ImmutableMap implementations to create a new, lightweight object on each call to view methods like keySet(), rather than creating and storing that object during the first call for reuse later. This is likely to slightly improve performance for some users, but it could lead to regressions in unusual cases, such as repeatedly calling asMultimap().inverse() on the same ImmutableMap instance. * net: Added HttpHeaders constant for on-prefetch-activation. * net: Added MediaType constants for application/yaml and application/x-pem- file. * util.concurrent: Fixed ExecutionSequencer queue stall when delegate executor throws RejectedExecutionException. * Changes of 33.6.0 * Migrated some classes from finalize() to PhantomReference in preparation for the removal of finalization. * cache: Deprecated CacheBuilder APIs that use TimeUnit in favor of those that use Duration. * collect: Added toImmutableSortedMap collectors that use the natural comparator. * collect: Changed ConcurrentHashMultiset, ImmutableMultimap, and TreeMultiset deserialization to avoid mutating final fields. In extremely unlikely scenarios in which an instance of that type contains an object that refers back to that instance, this could lead to a broken instance that throws NullPointerException when used. * graph: Removed @Beta from all APIs in the package. * graph: Added support to Graphs.transitiveClosure() for different strategies for adding self-loops. * graph: Added an asNetwork() view to Graph and ValueGraph. * hash: Added BloomFilter.serializedSize(). * net: Added HttpHeaders.CDN_CACHE_CONTROL. * Changes of 33.5.0 * For users of guava-gwt: Google has moved off GWT internally. We plan to continue to release guava-gwt for users of GWT and J2CL, but the artifact is no longer tested for GWT-specific issues, and we have limited resources to fix any unexpected issues that might arise. While we do not anticipate any specific problems, we can't guarantee how long support will continue. * Listed the JSpecify annotations as an optional dependency in our OSGi metadata. * cache: Improved the handling of exceptions from compute functions in Cache.asMap(). (We do still recommend using Caffeine rather than com.google.common.cache.) * collect: Improved Iterators.mergeSorted() to preserve stability for equal elements. * math: Added saturatedAbs methods to IntMath and LongMath. * net: Added image/avif to MediaType. * util.concurrent: Added Striped.custom. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1947 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1947 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * guava-javadoc-33.7.2-160000.1.1 * guava-33.7.2-160000.1.1 * guava-testlib-33.7.2-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * guava-javadoc-33.7.2-160000.1.1 * guava-33.7.2-160000.1.1 * guava-testlib-33.7.2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102554.html * https://bugzilla.suse.com/show_bug.cgi?id=1284985 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:31:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:31:49 -0000 Subject: SUSE-SU-2026:24261-1: important: Security update for aliyun-cli Message-ID: <179270110925.838.17220203890960540251@8741a845db10> # Security update for aliyun-cli Announcement ID: SUSE-SU-2026:24261-1 Release Date: 2026-10-19T15:31:50Z Rating: important References: * bsc#1283596 * bsc#1284203 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for aliyun-cli fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283596). Changes for aliyun-cli: * Update to version 3.5.1 * Add opt-in built-in OSS JSON/JSONL listings with bounded pages and resumable cursors, structured errors with recovery guidance, and non-interactive confirmation handling (#1452). * Add offline validation and read-only plans for single-file uploads and single-object deletion; record exact failed targets in exclusive JSONL manifests for cp/sync and expose sync deletion-phase state (#1452). * Fix the OSS bridge to preserve option order and `--`, propagate parser and service errors, pass profile region/timeouts/retry budgets, and refresh host credentials at request time without injecting them into argv (#1454). * Stop replaying writes after ambiguous transport or server failures; classify retries with jittered backoff, join workers before closing reports, and fix progress data races and failure-report filename collisions (#1452). * Enforce the host safety policy for legacy OSS operations and reject unsupported preview combinations (#1452, #1454). * Harden policy parsing and environment overrides to fail closed on invalid configuration; explicit deny rules cannot be bypassed by `--force`, `--yes`, or AI mode. * Enforce the safety policy before built-in extension dispatch (cliext/safety.go). * Restrict legacy FNF request-signing compatibility to a product allowlist (#1447). * API alias canonicalization was reverted and held: aliases and PascalCase/ kebab-case spellings remain separate policy matches, matching command spelling exactly as typed. * Version AI-mode OpenAPI and OSS error envelopes with `schemaVersion: "v1"`, and return structured startup configuration errors (#1453). * Add ALIBABA_CLOUD_CLI_AGENT_INTEGRATION controls for automatic AI mode; expand agent detection, User-Agent attribution, and Qoder China CLI detection (#1445, #1455). * Support case-insensitive product routing for in-process OpenAPI commands (#1445). * Expose regional and VPC product endpoints through queryable product Help (#1448). * Support camel RPC flat arrays (#1456) and prefer product prefix/substring suggestions over edit distance in "Did you mean" output. * Upgrade JMESPath to support `json.Number`, preserving large-number comparison and sorting precision and fixing empty-array average semantics. * Dispatch newly installed metadata plugins in-process (#1439). * Harden plugin archive extraction, package replacement/rollback, and download URL diagnostics (#1442). * Redact JSON and form bodies based on content while preserving the encoding of original form stars; keep raw and unparseable dry-run bodies intact (#1440, #1449). * Prefer native macOS architecture packages in install.sh (#1433). * Keep prerelease tags off the stable latest pointer and fail closed when release asset downloads are incomplete (#1437). * Include cliext in required checks, fix cross-platform test failures (#1446), restore single-file entrypoint builds, and stabilize language tests. * Update the aliyun-openapi-meta submodule and release jobs. * Add the OSS automation guide (en / zh-CN), document startup errors, exit statuses and command-spelling safety matching (#1450), and add the v3.5.1 CHANGELOG entry. * from version 3.5.0 * docs: add StsToken credential mode to README by @yndu13 in (#1403) * Built-in plugin and AI MODE enhancement by @yndu13 in (#1411) * Update Aliyun OpenAPI meta data * Update to version 3.4.11 * feat(openapi): extend --estimate-cost coverage (pricing context, SLS/openapi path, oss bridge, by-triple) and scripting contract by @api-tool-agent in (#1399) * from version 3.4.10 (no changes) * from version 3.4.9 * fix(maxc): fall back when symlink creation fails on Windows by @yndu13 in (#1390) * fix: quote-aware External process_command parsing by @yndu13 in (#1391) * fix: POSIX line-continuation in External process_command splitting by @yndu13 in (#1392) * Improve invalid flag error with did-you-mean hints by @yndu13 in (#1394) * fix: atomically write config.json via temp+rename by @yndu13 in (#1387) * fix: detect throttling by x-acs-retry-after header by @yndu13 in (#1395) * feat: add aliyun ecctl for Elastic Compute Control CLI by @yndu13 in (#1397) * fix: allow --profile with aliyun oss subcommands by @yndu13 in (#1398) * Update to version 3.4.8 * fix(test): mock plugin index for offline-stable Windows CI by @yndu13 in (#1379) * fix: correct waiter timeout/interval range validation by @yndu13 in (#1382) * feat(openapi): add --cli-dry-run flag for built-in PascalCase commands by @CodeSpaceiiii in (#1383) * fix: persist configure read-timeout as read_timeout by @yndu13 in (#1384) * fix: ignore empty --mode so env credentials still apply by @yndu13 in (#1386) * feat: add mseutil command to aliyun CLI by @yndu13 in (#1381) * fix(oss): honor profile endpoint and endpoint-type vpc by @yndu13 in (#1385) * fix: correct import order in openapi/library_test.go by @CodeSpaceiiii with @Copilot in (#1388) * Fix invisible API parameter names in help output (bold-black on dark terminals) by @mvanhorn in (#1362) * feat: integrate flow-cli into Aliyun CLI by @yndu13 in (#1380) * fix(esacli): harden exec override and shorthand flags by @yndu13 in (#1389) * from version 3.4.7 * {plugin} Add alias support for plugin by @AllyW in (#1376) * feat(mock): add response_body_size for controllable mock stdout size by @yndu13 in (#1378) * fix(plugin): prevent bulk update plugin pointer aliasing by @yndu13 in (#1377) * from version 3.4.6 * feat(openapi): add --estimate-cost-context to pass PricingContext to quotes by @LCLSpring in (#1373) * feat(mock): add delay_ms field to simulate command execution latency by @yndu13 in (#1375) * Update to version 3.4.5 * [Feature] Support ESA CLI Sub Command by @msyysm1211 in (#1345) * feat(config): support STS endpoint override for OIDC and role auth by @yndu13 in (#1372) * from version 3.4.4 * (no changes) * from version 3.4.3 * fix: correct valid typo in invalid command error by @yndu13 in (#1365) * {Misc} Add ALIBABA_CLOUD_DISABLE_EXTERNAL_PROCESS to disable external process by @AllyW in (#1366) * from version 3.4.2 * feat(openapi): add --estimate-cost and list-supported-pricing-apis by @LCLSpring in (#1364) * Update to version 3.4.1 * [Feature]Add Aliyun Lindorm CLI Subcommand by @MistySoul in (#1361) * {cliext} Add aliyun spark-submit by @AllyW in (#1358) * from version 3.4.0 * feat(acrutil): extract shared binary manager and add diagnosis subcommand by @copyrightpoiiiii in (#1349) * [feature] add rostran sub command by @xiao201208 in (#1350) * {OpenAPI} Add --cli-dry-run-json by @AllyW in (#1306) * {Misc} Fix plugin three layer cmd help by @AllyW in (#1343) * Feature/support anonymous by @yuexiu94 in (#1354) * feat: support retry-after policy for throttling error by @yndu13 in (#1355) * Update to version 3.3.23 * {Plugin} Allow plugins to opt out of host profile enforcement by @AllyW in (#1348) * Update to version 3.3.22 * {Logging} Skip list for self-built-gateway products by @AllyW in (#1346) * from version 3.3.21 * {Configure} Match policy rules against the command users actually type for ROA by @AllyW in (#1344) * from version 3.3.20 * {OpenAPI} Add call context logging by @AllyW in (#1342) * from version 3.3.19 * [Feature] Support MaxC CLI Sub Command by @dingxin-tech in (#1332) * feat(appmanager): Generalized PrepareEnv credential pass-through supports multiple authentication modes by @mengjunwei-mjw in (#1341) * from version 3.3.18 * Improve CMS2 command descriptions and clarify exception return codes by @tingbin-ctb in (#1337) * feat(iact3): add iact3 subcommand with manual upgrade by @xiao201208 in (#1336) * Add kmscli command by @oobujieshi in (#1340) * from version 3.3.17 * {Plugin} Support lang and profile from flag for plugin execution by @AllyW in (#1330) * Computenest pypi venv by @mengjunwei-mjw in (#1331) * feat: add codeup-cli subcommand for migrating third-party code repos by @imu2008 in (#1335) * from version 3.3.16 * Optimize error messages by @CodeSpaceiiii in (#1327) * {Openapi} Return InvalidApiError for unknown API on restful products by @AllyW in (#1326) * feat(acrutil): Add Alibaba Cloud Container Registry(ACR) Skill management CLI subcommand by @copyrightpoiiiii in (#1329) * {Configure} Support BearerToken profile mode by @AllyW in (#1333) * from version 3.3.15 * feat add saectl by @Beimingx in (#1319) * Cloud Monitor version 2.0: Independent binary access, Aliyun CMS2 subcommands by @thinkbetter18 in (#1322) * feat(otel): integrate OpenTelemetry support with environment variable by @CodeSpaceiiii in (#1324) * aliyuncms has been renamed to aliyuncms2. COMPAT_MODE, USER_AGENT, AI_USER_AGENT, and OTEL headers have been added. Issues with business parameter passing have been fixed by @tingbin-ctb in (#1325) * Update to version 3.3.14 * feat(appmanager): add appmanager subcommand with PyPI+OSS dual-source by @mengjunwei-mjw in (#1317) * {Misc} Add --name and update version check message for plugin install and adjust agent detection by @AllyW in (#1316) * from version 3.3.13 * Update to version 3.3.12 * Add AgentBay CLI command and implement language setting logic by @CodeSpaceiiii in (#1311) * {Profile} Add external-account-type for user profile by @AllyW in (#1312) * Implement CLI mock command with add, import, remove, list, clear, and path subcommands by @CodeSpaceiiii in (#1313) * {Openapi} Add agent segment to user-agent by @AllyW in (#1314) * from version 3.3.11 * Fix retrySaveProfile function to return success status and update tests by @CodeSpaceiiii in (#1310) * Update to version 3.3.10 * from version 3.3.9 * {Config} Add safety policy env parsing by @AllyW in (#1307) * from version 3.3.8 * {Core} Add plugin install --package and plugin show by @AllyW in (#1301) * from version 3.3.7 * {config} Fix: Only honor ALIBABA_CLOUD_ENDPOINT for profile endpoint env injection by @AllyW in (#1304) * from version 3.3.6 * {Core} Fix endpoint shorthand flag -e of oss by @AllyW in (#1303) * from version 3.3.5 * feat: profile support endpoint flag by @crimson-gao in (#1298) * {Core} Add aliyun upgrade and configurable plugin index source and fix CloudSSO/OAuth one-off CLI flags persisting by @AllyW in (#1299) * Update to version 3.3.4 * {Core} Fix unknown-flag parsing for plugin-style subcommands by @AllyW in (#1296) * from version 3.3.3 * {Core} Add ai-mode and safety policy configuration by @AllyW in (#1295) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1944 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1944 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * aliyun-cli-debuginfo-3.5.1-160000.1.1 * aliyun-cli-3.5.1-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * aliyun-cli-debuginfo-3.5.1-160000.1.1 * aliyun-cli-3.5.1-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283596 * https://bugzilla.suse.com/show_bug.cgi?id=1284203 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:32:07 -0000 Subject: SUSE-SU-2026:24260-1: important: Security update for MozillaFirefox Message-ID: <179270112758.838.10016952911978436171@8741a845db10> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:24260-1 Release Date: 2026-10-19T14:43:34Z Rating: important References: * bsc#1259712 * bsc#1259727 * bsc#1259730 * bsc#1262263 * bsc#1264713 * bsc#1275098 * bsc#1275605 * bsc#1275736 * bsc#1282347 * bsc#1284493 Cross-References: * CVE-2026-109704 * CVE-2026-109705 * CVE-2026-109706 * CVE-2026-109707 * CVE-2026-109708 * CVE-2026-109709 * CVE-2026-109710 * CVE-2026-109711 * CVE-2026-109712 * CVE-2026-109713 * CVE-2026-109715 * CVE-2026-109716 * CVE-2026-109717 * CVE-2026-109718 * CVE-2026-109719 * CVE-2026-109720 * CVE-2026-109721 * CVE-2026-109722 * CVE-2026-109723 * CVE-2026-109724 * CVE-2026-109725 * CVE-2026-109726 * CVE-2026-109727 * CVE-2026-109728 * CVE-2026-109729 * CVE-2026-109730 * CVE-2026-109731 * CVE-2026-109732 * CVE-2026-109733 * CVE-2026-109734 * CVE-2026-109736 * CVE-2026-109737 * CVE-2026-109738 * CVE-2026-109740 * CVE-2026-109741 * CVE-2026-109742 * CVE-2026-109743 * CVE-2026-109744 * CVE-2026-109745 * CVE-2026-109751 * CVE-2026-109752 * CVE-2026-109753 * CVE-2026-109754 * CVE-2026-109756 * CVE-2026-109757 * CVE-2026-109759 * CVE-2026-109760 * CVE-2026-109762 * CVE-2026-109763 * CVE-2026-109764 * CVE-2026-109765 * CVE-2026-109766 * CVE-2026-109767 * CVE-2026-109770 * CVE-2026-109775 * CVE-2026-109776 * CVE-2026-109777 * CVE-2026-109778 * CVE-2026-109781 * CVE-2026-109782 * CVE-2026-109783 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-93990 CVSS scores: * CVE-2026-109704 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109705 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109706 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109707 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109708 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109709 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109710 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109711 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109712 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L * CVE-2026-109713 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109715 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109716 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109717 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109718 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109719 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109720 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-109721 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109722 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109723 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109724 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109725 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109726 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109727 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109728 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109729 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109730 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109731 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109732 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109733 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109734 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109736 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109737 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109738 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109740 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109741 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109742 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109743 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109744 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109745 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109751 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109752 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109753 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109754 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109756 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109757 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-109759 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109760 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109762 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109764 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109765 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109766 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-109767 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109770 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-109775 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-109776 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-109777 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-109778 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109781 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 85 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 153.5.0 ESR (MFSA 2026-108, bsc#1284493): * CVE-2026-109704: Privilege escalation in the Application Update component. * CVE-2026-109705: Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. * CVE-2026-109706: Use-after-free in the Storage: IndexedDB component. * CVE-2026-109707: Sandbox escape due to use-after-free in the Networking component. * CVE-2026-109708: Sandbox escape due to incorrect boundary conditions in the Networking component. * CVE-2026-109709: Information disclosure, privilege escalation in the Security: Process Sandboxing component. * CVE-2026-109710: Use-after-free in the Graphics: Text component. * CVE-2026-109711: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-109712: Sandbox escape due to uninitialized memory in the Graphics component. * CVE-2026-109713: Use-after-free in the Crash Reporting component. * CVE-2026-109715: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109716: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-109717: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-109718: Use-after-free in the XML component. * CVE-2026-109719: Race condition, use-after-free in the Graphics: CanvasWebGL component. * CVE-2026-109720: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-109721: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-109722: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109723: Integer overflow in the Layout: Text and Fonts component. * CVE-2026-109724: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109725: Use-after-free in the DOM: Core & HTML component. * CVE-2026-109726: Use-after-free in the SVG component. * CVE-2026-109727: Use-after-free in the Audio/Video component. * CVE-2026-109728: Use-after-free in the DOM: Animation component. * CVE-2026-109729: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-109730: Integer overflow in the Graphics component. * CVE-2026-109731: Incorrect boundary conditions in the Graphics: Canvas2D component. * CVE-2026-109732: Use-after-free in the DOM: Streams component. * CVE-2026-109733: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-109734: Mitigation bypass in the DOM: Security component. * CVE-2026-109736: Frame poisoning in the Layout component. * CVE-2026-109737: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109738: Use-after-free in the Audio/Video: Playback component. * CVE-2026-109740: Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. * CVE-2026-109741: Use-after-free in the Storage: Bucket File System component. * CVE-2026-109742: Information disclosure in the PDF Viewer component. * CVE-2026-109743: Privilege escalation in the Panning and Zooming component. * CVE-2026-109744: Other issue in the DOM: File component. * CVE-2026-109745: Sandbox escape due to uninitialized memory in the DOM: Web Serial component. * CVE-2026-109751: Information disclosure in the Networking component. * CVE-2026-109752: Use-after-free in the DOM: Workers component. * CVE-2026-109753: Incorrect boundary conditions in the Layout component. * CVE-2026-109754: Incorrect boundary conditions in the DOM: Editor component. * CVE-2026-109756: Privilege escalation in the DOM: Navigation component. * CVE-2026-109757: Sandbox escape due to race condition in the Networking component. * CVE-2026-109759: Site isolation issue in the Networking component. * CVE-2026-109760: Mitigation bypass in the Networking: HTTP component. * CVE-2026-109762: Incorrect boundary conditions in the SVG component. * CVE-2026-109763: Mitigation bypass in the File Handling component. * CVE-2026-109764: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109765: Race condition, use-after-free in the Graphics: Text component. * CVE-2026-109766: Mitigation bypass in the Enterprise Policies component. * CVE-2026-109767: Information disclosure in the Networking component. * CVE-2026-109770: Spoofing issue in the DOM: Web Serial component. * CVE-2026-109775: Denial-of-service in the WebRTC component. * CVE-2026-109776: Race condition in the XPCOM component. * CVE-2026-109777: Information disclosure in the Storage: IndexedDB component. * CVE-2026-109778: Privilege escalation in the WebExtensions component. * CVE-2026-109781: Denial-of-service in the Printing: Output component. * CVE-2026-109782: Mitigation bypass in the File Handling component. * CVE-2026-109783: Mitigation bypass in the File Handling component. libexpat updated: * CVE-2026-32776: libexpat: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value. (bsc#1259727) * CVE-2026-32777: libexpat: denial of service due to infinite loop in DTD content parsing. (bsc#1259712) * CVE-2026-32778: libexpat: NULL pointer dereference in `setContext` on retry after an out-of-memory condition. (bsc#1259730) * CVE-2026-41080: libexpat: insufficient entropy, and thus hash flooding can occur via a crafted XML document. (bsc#1262263) * CVE-2026-45186: libexpat: computational complexity of attribute name collision checks allows a denial of service via moderately sized crafted XML input. (bsc#1264713) * CVE-2026-50219: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking in libexpat could lead to information disclosure, integrity loss, or denial of service. (bsc#1275098) * CVE-2026-56131: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking for XML_ResumeParser in libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56132: libexpat: Heap buffer overflow in doProlog due to mishandled array reallocation in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-56403: libexpat: Integer overflow vulnerability in the storeAtts attribute parsing function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56404: libexpat: Integer overflow vulnerability in the addBinding routine of libexpat could lead to memory corruption and potential security risks. (bsc#1275098) * CVE-2026-56405: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56406: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56407: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56408: libexpat: Integer overflow vulnerability in the copyString function in libexpat could lead to memory corruption. (bsc#1275098) * CVE-2026-56409: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56410: libexpat: Integer overflow vulnerability in the xmlwf utility of libexpat could lead to denial of service. (bsc#1275098) * CVE-2026-56411: libexpat: Integer overflow vulnerability in libexpat could lead to memory corruption or denial of service. (bsc#1275098) * CVE-2026-56412: libexpat: Use-after-free vulnerability due to a lack of handler call depth tracking in libexpat could lead to denial of service or memory corruption. (bsc#1275098) * CVE-2026-66046: libexpat: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c. (bsc#1275736) * CVE-2026-72522: libexpat: Out-of-bounds read and resultant infinite loop in the Unicode processing functions in libexpat allowed attackers to cause denial of service. (bsc#1275605) * CVE-2026-76641: libexpat: Out-of-bounds read vulnerability caused by a struct size mismatch in libexpat allowed attackers to trigger memory corruption or a crash. (bsc#1275736) * CVE-2026-76956: libexpat: Insufficient entropy caused by misinterpretation of getentropy's return code in libexpat allowed attackers to cause a denial of service via hash flooding attacks. (bsc#1275736) * CVE-2026-76957: libexpat: Use-after-free vulnerability due to lack of handler call depth tracking with custom encoding callbacks in libexpat could lead to memory corruption. (bsc#1275736) * CVE-2026-93990: libexpat: Improper handling of lone high surrogates in UTF-16 encoded XML in libexpat allowed attackers to pass unpaired surrogates or silently replace input characters. (bsc#1282347) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1942 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1942 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * MozillaFirefox-debuginfo-153.5.0-160000.1.1 * MozillaFirefox-translations-other-153.5.0-160000.1.1 * MozillaFirefox-153.5.0-160000.1.1 * MozillaFirefox-debugsource-153.5.0-160000.1.1 * MozillaFirefox-translations-common-153.5.0-160000.1.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * MozillaFirefox-devel-153.5.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * MozillaFirefox-debuginfo-153.5.0-160000.1.1 * MozillaFirefox-translations-other-153.5.0-160000.1.1 * MozillaFirefox-153.5.0-160000.1.1 * MozillaFirefox-debugsource-153.5.0-160000.1.1 * MozillaFirefox-translations-common-153.5.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * MozillaFirefox-devel-153.5.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109704.html * https://www.suse.com/security/cve/CVE-2026-109705.html * https://www.suse.com/security/cve/CVE-2026-109706.html * https://www.suse.com/security/cve/CVE-2026-109707.html * https://www.suse.com/security/cve/CVE-2026-109708.html * https://www.suse.com/security/cve/CVE-2026-109709.html * https://www.suse.com/security/cve/CVE-2026-109710.html * https://www.suse.com/security/cve/CVE-2026-109711.html * https://www.suse.com/security/cve/CVE-2026-109712.html * https://www.suse.com/security/cve/CVE-2026-109713.html * https://www.suse.com/security/cve/CVE-2026-109715.html * https://www.suse.com/security/cve/CVE-2026-109716.html * https://www.suse.com/security/cve/CVE-2026-109717.html * https://www.suse.com/security/cve/CVE-2026-109718.html * https://www.suse.com/security/cve/CVE-2026-109719.html * https://www.suse.com/security/cve/CVE-2026-109720.html * https://www.suse.com/security/cve/CVE-2026-109721.html * https://www.suse.com/security/cve/CVE-2026-109722.html * https://www.suse.com/security/cve/CVE-2026-109723.html * https://www.suse.com/security/cve/CVE-2026-109724.html * https://www.suse.com/security/cve/CVE-2026-109725.html * https://www.suse.com/security/cve/CVE-2026-109726.html * https://www.suse.com/security/cve/CVE-2026-109727.html * https://www.suse.com/security/cve/CVE-2026-109728.html * https://www.suse.com/security/cve/CVE-2026-109729.html * https://www.suse.com/security/cve/CVE-2026-109730.html * https://www.suse.com/security/cve/CVE-2026-109731.html * https://www.suse.com/security/cve/CVE-2026-109732.html * https://www.suse.com/security/cve/CVE-2026-109733.html * https://www.suse.com/security/cve/CVE-2026-109734.html * https://www.suse.com/security/cve/CVE-2026-109736.html * https://www.suse.com/security/cve/CVE-2026-109737.html * https://www.suse.com/security/cve/CVE-2026-109738.html * https://www.suse.com/security/cve/CVE-2026-109740.html * https://www.suse.com/security/cve/CVE-2026-109741.html * https://www.suse.com/security/cve/CVE-2026-109742.html * https://www.suse.com/security/cve/CVE-2026-109743.html * https://www.suse.com/security/cve/CVE-2026-109744.html * https://www.suse.com/security/cve/CVE-2026-109745.html * https://www.suse.com/security/cve/CVE-2026-109751.html * https://www.suse.com/security/cve/CVE-2026-109752.html * https://www.suse.com/security/cve/CVE-2026-109753.html * https://www.suse.com/security/cve/CVE-2026-109754.html * https://www.suse.com/security/cve/CVE-2026-109756.html * https://www.suse.com/security/cve/CVE-2026-109757.html * https://www.suse.com/security/cve/CVE-2026-109759.html * https://www.suse.com/security/cve/CVE-2026-109760.html * https://www.suse.com/security/cve/CVE-2026-109762.html * https://www.suse.com/security/cve/CVE-2026-109763.html * https://www.suse.com/security/cve/CVE-2026-109764.html * https://www.suse.com/security/cve/CVE-2026-109765.html * https://www.suse.com/security/cve/CVE-2026-109766.html * https://www.suse.com/security/cve/CVE-2026-109767.html * https://www.suse.com/security/cve/CVE-2026-109770.html * https://www.suse.com/security/cve/CVE-2026-109775.html * https://www.suse.com/security/cve/CVE-2026-109776.html * https://www.suse.com/security/cve/CVE-2026-109777.html * https://www.suse.com/security/cve/CVE-2026-109778.html * https://www.suse.com/security/cve/CVE-2026-109781.html * https://www.suse.com/security/cve/CVE-2026-109782.html * https://www.suse.com/security/cve/CVE-2026-109783.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1259712 * https://bugzilla.suse.com/show_bug.cgi?id=1259727 * https://bugzilla.suse.com/show_bug.cgi?id=1259730 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1275098 * https://bugzilla.suse.com/show_bug.cgi?id=1275605 * https://bugzilla.suse.com/show_bug.cgi?id=1275736 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1284493 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:32:22 -0000 Subject: SUSE-SU-2026:24258-1: moderate: Security update for bcel Message-ID: <179270114231.838.8624106816374798572@8741a845db10> # Security update for bcel Announcement ID: SUSE-SU-2026:24258-1 Release Date: 2026-10-16T12:21:02Z Rating: moderate References: * bsc#1284399 * bsc#1284400 Cross-References: * CVE-2026-105111 * CVE-2026-94114 CVSS scores: * CVE-2026-105111 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-105111 ( NVD ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-105111 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94114 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-94114 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-94114 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for bcel fixes the following issues: * CVE-2026-94114: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser (bsc#1284400). * CVE-2026-105111: Class2HTML emits unescaped class strings, enabling stored XSS (bsc#1284399). Changes for bcel: * Update to version 6.13.0 * New Features * Add support for permitted subclasses * Add RecordComponentInfo.getAttribute(byte tag) * Add Const.MAJOR_27 * Add Const.MINOR_27 * Add and use ArrayType.isElementType(Type) * Add Const.MAJOR_28 * Add Const.MINOR_28 * Fixed Bugs * Fix constant pool module access test on Java 26 and above * Deprecate org.apache.bcel.classfile.Utility.Utility() * Deprecate org.apache.bcel.verifier.exc.Utility .getStackTrace(Throwable) * Fix all Javadoc warnings and enforce checks by default * Escape constant pool names in generated HTML * Escape referenced names in BCELFactory Java output * Make wide flag thread-local in Utility.codeToString * Read multianewarray dimensions as unsigned byte * Site docs: clarify security model * Read ConstantDynamic indices as unsigned shorts * Validate index upper bound in CPInstruction, IINC and RET setIndex * Use correct attribute tag in NestHost and ModuleMainClass * Propagate runtime-visible flag when parsing parameter annotations * Use fixedLength for parsed LOOKUPSWITCH length * Fix ConstantPoolGen dedup key collisions for names with delimiters * Read unsigned bytecode operands in CodeHTML disassembler * Deep-copy bootstrap arguments array in BootstrapMethod.copy() * Use exclusive live-range end in LocalVariableTable .getLocalVariable * Build TABLESWITCH from sorted arrays in SWITCH * Use array element type not basic type for primitive array access * Set length in INVOKEDYNAMIC constructor * Reject CALOAD on non-char arrays in structural verification * Add negative verifier tests for remaining array load/store component type checks * Validate u1 count bound in INVOKEINTERFACE and MULTIANEWARRAY * Match wide local variable instruction length to dumped bytes * Bound IINC increment to signed short * Fix SpotBugs USO_UNSAFE_METHOD_SYNCHRONIZATION in ConstantUtf8 * Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser * Nested annotation element values recurse unboundedly; MAX_ARRAY_DIMENSIONS cap bypassed * Opcodes tableswitch and lookupswitch add boundary checks * JustIce Pass 2 hangs on cyclic superclass chain of a referenced exception class * JustIce Pass 2 LVT check amplifies each 10-byte entry into ~131k hashtable operations * Pass 3b dataflow stores frames per instruction and clones ever-growing execution chains * Cubic handlers * range * subroutines scan in Subroutines constructor hangs JustIce Pass 3b * Subroutines.noRecursiveCalls enumerates exponentially many JSR call paths * Disassembler and Class2HTML re-implement the unchecked switch-table allocation * ConstantPool.constantToString recurses forever on self-referencing CONSTANT_MethodHandle * Utility.typeSignatureToString recurses per generic-nesting level, unbounded, with quadratic substring copies * Repositories cache classes under the input-defined this_class name; global static Repository/VerifierFactory make the poisoning ClassLoader-wide (bsc#1284400, CVE-2026-94114) * Silent u2/u1 count truncation across dump paths corrupts emitted bytecode * Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports) (bsc#1284399, CVE-2026-105111) * Class2HTML builds output file paths from the unvalidated class name * ClassPath.getBytes() sizes its buffer from the forged ZIP uncompressed-size field * PMG attribute ignores declared length, enabling BCEL-vs-JVM parse divergence * Signature.matchGJIdent recurses unboundedly on nested generic signatures (Signature.translate) * Utility.decode fixed 3x buffer breaks the encode/decode round trip and throws unchecked AIOOBE * BCELifier interpolates attacker class/package names into generated Java source unescaped * Verifier pass 3a delayed checks are quadratic in attribute and code size * Verifier cache grows unboundedly with attacker-chosen class names * Static WIDE ThreadLocal survives exceptions, corrupting the next class's disassembly on the same thread * Utility.JavaReader escape decoding: OOB table index, bad-hex crash, silent non-canonical aliasing * Changes * Bump org.apache.commons:commons-parent from 95 to 104 * Bump org.jetbrains.kotlin:kotlin-stdlib from 2.3.0 to 2.4.20 * Bump commons-io:commons-io from 2.21.0 to 2.22.0 * Bump jna.version from 5.18.1 to 5.19.1 * [test] Bump org.apache.commons:commons-collections4 from 4.5.0 to 4.6.0 * Changes of version 6.12.0 * Add Const.MAJOR_26 * Add Const.MINOR_26 * Fix infinite loop in example.TransitiveHull * Fix Apache RAT plugin console warnings * Fix malformed Javadoc comments * Make the build reproducible on the Azul JDK * Fix infinite loop in JavaClass.findField() on invalid input * Fix infinite loop in JavaClass.getAllInterfaces() on invalid input * Fix infinite loop in JavaClass.getSuperClasses() on invalid * Exception message in Args.requireU4() refers to the wrong data type * Exception message in Args.requireU2() refers to the wrong upper range value * Code.Code(int, int, DataInput, ConstantPool) now throws a ClassFormatException if the code array is greater than the JVM specification allows * Code.Code(int, int, int, int, byte[], CodeException[], Attribute[], ConstantPool) now throws a ClassFormatException if the code array is greater than the JVM specification allows * Code.setCode(byte[]) now throws a ClassFormatException if the code array is greater than the JVM specification allows * ClassDumper.dump() should not call the input stream it didn't open; fixes IOException when calling DumpClass.main (ClassDumper.java:351) * org.apache.bcel.classfile.ConstantPool.ConstantPool(Constant[]) now uses varagrs: ConstantPool(Constant...) * org.apache.bcel.classfile.Deprecated now requires its the attribute_length item be zero * org.apache.bcel.classfile.Synthetic now requires its the * The size of an Attribute unknown to the JVM specification is limited to 1 MB and is overridden with the system property BCEL.Attribute.Unknown.max_attribute_length * Bump org.apache.commons:commons-parent from 89 to 95 * [test] Bump org.jetbrains.kotlin:kotlin-stdlib from 2.2.20 to 2.3.0 * Bump commons-io:commons-io from 2.20.0 to 2.21.0 * Bump commons-lang3 from 3.19.0 to 3.20.0 * [test] Bump org.apache.commons:commons-exec from 1.5.0 to 1.6.0 * Changes of version 6.11.0 * Add Const.MAJOR_25 * Add Const.MINOR_25 * Add experimental CycloneDX VEX file * Refactor to use new Maven POM variable ecj.version * Replace internal use of Locale.ENGLISH with Locale.ROOT * BCEL-375: Wrong permissions on bcel .jar file in binary .tar.gz distribution file * BCEL-376: ClassPath.close() throws UnsupportedOperationException when created with system-classpath * ClassPath.getResources(String) can use an ArrayList instead of a Vector * Fix SpotBugs [ERROR] Medium: Operation on the "created" shared variable in "ConstantUtf8" class is not atomic [org.apache .bcel.classfile.ConstantUtf8] At ConstantUtf8.java:[line 119] AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE * Fix SpotBugs [ERROR] Medium: Operation on the "considered" shared variable in "ConstantUtf8" class is not atomic [org .apache.bcel.classfile.ConstantUtf8] At ConstantUtf8.java: [line 137] AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE * Fix SpotBugs [ERROR] Medium: Operation on the "skipped" shared .bcel.classfile.ConstantUtf8] At ConstantUtf8.java:[line 134] * org.apache.bcel.util.ClassPath .addJdkModules(String, List) now reads the system property "jdk.module.path" instead of "java.modules.path" * Fix ConstantPoolModuleAccessTest failures on Java 25 * 377: Fix testing on Java 24 and up * Bump org.apache.commons:commons-parent from 72 to 89 * Bump org.apache.commons:commons-lang3 from 3.14.0 to 3.19.0 * Bump org.jetbrains.kotlin:kotlin-stdlib from 2.0.0 to 2.2.20 * Bump commons-io:commons-io from 2.16.1 to 2.20.0 * Bump jna.version from 5.14.0 to 5.18.1 * Bump org.codehaus.mojo:taglist-maven-plugin from 3.1.0 to 3.2.1 * Bump org.apache.commons:commons-collections4 from 4.5.0-M2 to 4.5.0 * Bump org.apache.commons:commons-exec from 1.4.0 to 1.5.0 a minimum of Java 8 * Fix PMD UnnecessaryFullyQualifiedName * Fix PMD EmptyCatchBlock by allowing commented blocks * Fix PMD EmptyControlStatement by allowing commented blocks JasminVisitor * SpotBugs checks should ignore code generated by JavaCC * Fix SpotBugs URF_UNREAD_FIELD in ClassDumper * Fix SpotBugs DM_DEFAULT_ENCODING in JasminVisitor ASTFunAppl Mini.Environment * Fix SpotBugs DM_DEFAULT_ENCODING in Mini.MiniC * Fix SpotBugs WMI_WRONG_MAP_ITERATOR in Package.go(String[]) TransitiveHull.getIgnored() * Add accessors to model and unit tests, Javadoc * Add Const.MAJOR_22 * Add Const.MINOR_22 * Add Const.MAJOR_23 * Add Const.MINOR_23 * Add Const.MAJOR_24 * Add Const.MINOR_24 2.0.0 to 4.5.0-M2 * Bump org.apache.commons:commons-parent from 69 to 71 3.1.0 * Includes changes from 6.9.0 Maintenance and bug fix release * Add Support for Java 16 records * Add null guard for InstructionFactory.createInvoke() * Avoid possible NullPointerException in org.apache.bcel.classfile.DescendingVisitor.accept(E[]) AnnotationEntryGen[]) ConstantPoolGen, boolean) ElementValue[], ConstantPoolGen) org.apache.bcel.generic.ClassGen.setMethods(Method[]) * Avoid possible NullPointerException in org.apache.bcel.generic .ClassGen.unpackAnnotations(Attribute[]) * Avoid possible NullPointerException in org.apache.bcel .classfile.ParameterAnnotationEntry .createParameterAnnotationEntries(Attribute[]) org.apache.bcel.generic.ClassGen.ClassGen(JavaClass) .FieldGenOrMethodGen.addAll(Attribute[]) * Avoid NullPointerException after calling org.apache.bcel .classfile.MethodParameters.setParameters(MethodParameter[]) with null .classfile.ParameterAnnotations .setParameterAnnotationTable(ParameterAnnotationEntry[]) .classfile.LocalVariableTypeTable .setLocalVariableTable(LocalVariable[]) with null .classfile.LocalVariableTable .classfile.LineNumberTable.setLineNumberTable(LineNumber[]) .classfile.JavaClass.setMethods(Method[] with null .classfile.JavaClass.setInterfaces(int[]) with null .classfile.JavaClass.setInterfaceNames(String[]) with null .classfile.JavaClass.setFields(Field[]) with null .classfile.JavaClass.setAttributes(Attribute[]) with null .classfile.ConstantPool.setConstantPool(Constant[]) with null .classfile.FieldOrMethod.setAttributes(Attribute[]) with null .classfile.Annotations.setAnnotationTable(AnnotationEntry[]) .classfile.ArrayElementValue.ArrayElementValue(int, ElementValue[], ConstantPool) with null .classfile.BootstrapMethod.BootstrapMethod(int, int[]) with null .classfile.BootstrapMethod.setBootstrapArguments(int[]) with .classfile.BootstrapMethods.BootstrapMethods(int, int, BootstrapMethod[], ConstantPool) with null .classfile.BootstrapMethods .setBootstrapMethods(BootstrapMethod[]) with null * Avoid NullPointerException calling org.apache.bcel.generic .InstructionList.redirectLocalVariables(LocalVariableGen[], InstructionHandle, InstructionHandle) with null .InstructionList.redirectExceptionHandlers(CodeExceptionGen[], .InstructionList.findHandle(InstructionHandle[], int[], int, int) with null .MethodGen.setArgumentTypes(Type[]) with null .MethodGen.setArgumentNames(String[]) with null .MethodGen.removeRuntimeAttributes(Attribute[]) with null .MethodGen.makeMutableVersion(AnnotationEntry[]) with null * Bump org.apache.commons:commons-parent from 66 to 69 * Bump org.jetbrains.kotlin:kotlin-stdlib from 1.9.22 to 1.9.23 * Bump commons-io:commons-io from 2.15.1 to 2.16.1 * 6.8.0 (2023-12-08) Maintenance and bug fix release ClassFormatException input Java4Example ~ Add verifier tests on some opcodes signatures ~ Add Const.MAJOR_20 ~ Add Const.MINOR_20 ~ Add Const.MAJOR_21 ~ Add Const.MINOR_21 ~ [Bcelifier] stackmap support to pass JDK verifier SE_BAD_FIELD BCELFactory.java:[lines 192-196] SF_SWITCH_FALLTHROUGH NullPointerException not a NullPointerException ~ Test and coverage of InstructionFactory ~ Verifier: test and coverage for SWAP instruction () in it`()' ~ Fix null pointers in AnnotationEntry supports package-private) test ATHROW on empty stack Select#toString(boolean) ~ Fix EmptyVisitorTestCase on Java 21 ~ Bump commons-parent from 54 to 65 ~ Bump jna.version from 5.12.1 to 5.13.0 ~ Bump kotlin-stdlib from 1.8.10 to 1.9.21 ~ Bump commons-io from 2.11.0 to 2.15.1 ~ Bump commons-lang3 from 3.12.0 to 3.14.0 3.1.1 * 6.7.0 (2022-11-28) Maintenance and bug fix release * 6.6.1 (2022-10-29) Maintenance and bug fix release * 6.6.0 (2022-10-08) Minor feature and bug fix release * 6.5.0 (2020-06-05) Minor feature and bug fix release * 6.4.1 (2019-09-26) Bug fix release * 6.4.0 (2019-09-20) Feature and bug fix release requires Java 7 or higher to run class org.apache.bcel.generic.InstructionConsts class java.lang.String ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1923 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1923 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * bcel-6.13.0-160000.1.1 * bcel-javadoc-6.13.0-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * bcel-6.13.0-160000.1.1 * bcel-javadoc-6.13.0-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-105111.html * https://www.suse.com/security/cve/CVE-2026-94114.html * https://bugzilla.suse.com/show_bug.cgi?id=1284399 * https://bugzilla.suse.com/show_bug.cgi?id=1284400 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:33:23 -0000 Subject: SUSE-SU-2026:4870-1: critical: Security update for php74 Message-ID: <179270120357.838.1812084300956850581@8741a845db10> # Security update for php74 Announcement ID: SUSE-SU-2026:4870-1 Release Date: 2026-10-22T16:03:33Z Rating: critical References: * bsc#1286027 Cross-References: * CVE-2026-109618 * CVE-2026-109619 CVSS scores: * CVE-2026-109618 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109618 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109618 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109618 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109619 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-109619 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-109619 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP2 * SUSE Linux Enterprise High Performance Computing 12 SP3 * SUSE Linux Enterprise High Performance Computing 12 SP4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 * SUSE Linux Enterprise Server 12 SP1 * SUSE Linux Enterprise Server 12 SP2 * SUSE Linux Enterprise Server 12 SP3 * SUSE Linux Enterprise Server 12 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 * SUSE Linux Enterprise Server for SAP Applications 12 SP1 * SUSE Linux Enterprise Server for SAP Applications 12 SP2 * SUSE Linux Enterprise Server for SAP Applications 12 SP3 * SUSE Linux Enterprise Server for SAP Applications 12 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * Web and Scripting Module 12 An update that solves two vulnerabilities can now be installed. ## Description: This update for php74 fixes the following issues: Fixed two security issues: * CVE-2026-109618: memory corruption leading to RCE * CVE-2026-109619: memory corruption leading to RCE ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Web and Scripting Module 12 zypper in -t patch SUSE-SLE-Module-Web-Scripting-12-2026-4870 ## Package List: * Web and Scripting Module 12 (aarch64 ppc64le s390x x86_64) * php74-sqlite-7.4.33-1.74.1 * php74-fastcgi-7.4.33-1.74.1 * php74-enchant-7.4.33-1.74.1 * php74-gmp-7.4.33-1.74.1 * php74-odbc-7.4.33-1.74.1 * php74-exif-7.4.33-1.74.1 * php74-fpm-7.4.33-1.74.1 * php74-dba-7.4.33-1.74.1 * php74-ftp-debuginfo-7.4.33-1.74.1 * php74-soap-debuginfo-7.4.33-1.74.1 * php74-soap-7.4.33-1.74.1 * php74-mysql-debuginfo-7.4.33-1.74.1 * php74-sqlite-debuginfo-7.4.33-1.74.1 * php74-pcntl-debuginfo-7.4.33-1.74.1 * php74-curl-7.4.33-1.74.1 * php74-sysvmsg-debuginfo-7.4.33-1.74.1 * php74-phar-7.4.33-1.74.1 * php74-fileinfo-debuginfo-7.4.33-1.74.1 * php74-snmp-debuginfo-7.4.33-1.74.1 * php74-odbc-debuginfo-7.4.33-1.74.1 * php74-gettext-7.4.33-1.74.1 * php74-pdo-debuginfo-7.4.33-1.74.1 * php74-pdo-7.4.33-1.74.1 * php74-xmlwriter-7.4.33-1.74.1 * php74-sysvsem-7.4.33-1.74.1 * php74-tokenizer-debuginfo-7.4.33-1.74.1 * php74-7.4.33-1.74.1 * php74-mbstring-7.4.33-1.74.1 * php74-bz2-debuginfo-7.4.33-1.74.1 * php74-curl-debuginfo-7.4.33-1.74.1 * php74-iconv-7.4.33-1.74.1 * php74-xmlreader-7.4.33-1.74.1 * php74-shmop-7.4.33-1.74.1 * php74-zip-7.4.33-1.74.1 * php74-xsl-7.4.33-1.74.1 * php74-zlib-debuginfo-7.4.33-1.74.1 * php74-fpm-debuginfo-7.4.33-1.74.1 * php74-ldap-7.4.33-1.74.1 * php74-zlib-7.4.33-1.74.1 * php74-sysvmsg-7.4.33-1.74.1 * php74-tidy-debuginfo-7.4.33-1.74.1 * php74-sodium-debuginfo-7.4.33-1.74.1 * php74-fastcgi-debuginfo-7.4.33-1.74.1 * php74-json-debuginfo-7.4.33-1.74.1 * php74-openssl-debuginfo-7.4.33-1.74.1 * php74-xmlreader-debuginfo-7.4.33-1.74.1 * php74-sysvsem-debuginfo-7.4.33-1.74.1 * php74-ctype-debuginfo-7.4.33-1.74.1 * php74-readline-debuginfo-7.4.33-1.74.1 * php74-pcntl-7.4.33-1.74.1 * php74-openssl-7.4.33-1.74.1 * php74-gd-debuginfo-7.4.33-1.74.1 * php74-ldap-debuginfo-7.4.33-1.74.1 * php74-debugsource-7.4.33-1.74.1 * php74-json-7.4.33-1.74.1 * php74-phar-debuginfo-7.4.33-1.74.1 * php74-fileinfo-7.4.33-1.74.1 * apache2-mod_php74-debuginfo-7.4.33-1.74.1 * php74-ftp-7.4.33-1.74.1 * php74-exif-debuginfo-7.4.33-1.74.1 * php74-tokenizer-7.4.33-1.74.1 * php74-xmlrpc-debuginfo-7.4.33-1.74.1 * php74-intl-7.4.33-1.74.1 * php74-debuginfo-7.4.33-1.74.1 * php74-dom-7.4.33-1.74.1 * php74-readline-7.4.33-1.74.1 * php74-gd-7.4.33-1.74.1 * php74-xsl-debuginfo-7.4.33-1.74.1 * php74-posix-7.4.33-1.74.1 * php74-bcmath-debuginfo-7.4.33-1.74.1 * php74-opcache-7.4.33-1.74.1 * php74-pgsql-debuginfo-7.4.33-1.74.1 * php74-opcache-debuginfo-7.4.33-1.74.1 * php74-intl-debuginfo-7.4.33-1.74.1 * php74-tidy-7.4.33-1.74.1 * php74-sysvshm-debuginfo-7.4.33-1.74.1 * php74-dom-debuginfo-7.4.33-1.74.1 * php74-dba-debuginfo-7.4.33-1.74.1 * php74-sodium-7.4.33-1.74.1 * php74-calendar-debuginfo-7.4.33-1.74.1 * php74-iconv-debuginfo-7.4.33-1.74.1 * php74-zip-debuginfo-7.4.33-1.74.1 * php74-sockets-7.4.33-1.74.1 * php74-gettext-debuginfo-7.4.33-1.74.1 * php74-enchant-debuginfo-7.4.33-1.74.1 * php74-sockets-debuginfo-7.4.33-1.74.1 * php74-xmlrpc-7.4.33-1.74.1 * php74-gmp-debuginfo-7.4.33-1.74.1 * php74-posix-debuginfo-7.4.33-1.74.1 * php74-mysql-7.4.33-1.74.1 * php74-pgsql-7.4.33-1.74.1 * php74-snmp-7.4.33-1.74.1 * php74-xmlwriter-debuginfo-7.4.33-1.74.1 * php74-bz2-7.4.33-1.74.1 * php74-ctype-7.4.33-1.74.1 * php74-bcmath-7.4.33-1.74.1 * apache2-mod_php74-7.4.33-1.74.1 * php74-calendar-7.4.33-1.74.1 * php74-shmop-debuginfo-7.4.33-1.74.1 * php74-sysvshm-7.4.33-1.74.1 * php74-mbstring-debuginfo-7.4.33-1.74.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109618.html * https://www.suse.com/security/cve/CVE-2026-109619.html * https://bugzilla.suse.com/show_bug.cgi?id=1286027 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:34:06 -0000 Subject: SUSE-SU-2026:4867-1: important: Security update for go1.26-openssl Message-ID: <179270124652.838.5478072145123809657@8741a845db10> # Security update for go1.26-openssl Announcement ID: SUSE-SU-2026:4867-1 Release Date: 2026-10-22T15:06:58Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 * bsc#1286261 * bsc#1286317 * jsc#SLE-18320 Cross-References: * CVE-2026-111943 * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). Changes: * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF * go#81152 cmd/compile/internal/test: TestMergeLocalsIntegration failures * go#81113 debug/elf: applyRelocationsPPC was broken by CL 705075 * go#80889 os: TestRootMultiMkdirAllShallow failures on openbsd * go#80851 cmd/go: pseudo #cgo directive FFLAGS value mixed up with CXXFLAGS in Go 1.26 * go#80827 runtime: async preemption corrupts AVX (YMM) state on netbsd/amd64 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4867 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4867 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4867 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4867 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4867 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4867 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4867 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4867 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150000.1.21.2 * go1.26-openssl-1.26.10-150000.1.21.2 * go1.26-openssl-race-1.26.10-150000.1.21.2 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 * https://jira.suse.com/browse/SLE-18320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:34:47 -0000 Subject: SUSE-SU-2026:4864-1: important: Security update for go1.26 Message-ID: <179270128744.838.3721080777919444742@8741a845db10> # Security update for go1.26 Announcement ID: SUSE-SU-2026:4864-1 Release Date: 2026-10-22T13:37:39Z Rating: important References: * bsc#1255111 * bsc#1284770 * bsc#1284772 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 * CVE-2026-78663 * CVE-2026-78669 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities and has two security fixes can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go1.26.10 (bsc#1255111): * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4864 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4864 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4864 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4864 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4864 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4864 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4864 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4864 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4864 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4864 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4864 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-1.26.10-150000.1.36.1 * go1.26-race-1.26.10-150000.1.36.1 * go1.26-doc-1.26.10-150000.1.36.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:34:55 -0000 Subject: SUSE-SU-2026:4863-1: important: Security update for go1.27 Message-ID: <179270129566.838.17388575217744898951@8741a845db10> # Security update for go1.27 Announcement ID: SUSE-SU-2026:4863-1 Release Date: 2026-10-22T13:35:56Z Rating: important References: * bsc#1272545 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability and has two security fixes can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4863 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4863 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4863 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4863 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4863 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4863 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4863 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4863 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4863 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4863 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4863 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.27-1.27.3-150000.1.15.1 * go1.27-doc-1.27.3-150000.1.15.1 * go1.27-race-1.27.3-150000.1.15.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:35:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:35:00 -0000 Subject: SUSE-SU-2026:4861-1: important: Security update for distribution Message-ID: <179270130032.838.4615934515121489401@8741a845db10> # Security update for distribution Announcement ID: SUSE-SU-2026:4861-1 Release Date: 2026-10-22T12:55:05Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for distribution rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4861 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4861 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4861 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4861 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4861 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4861 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4861 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4861 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4861 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4861 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4861 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4861 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * distribution-registry-3.1.1-150400.9.43.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:33:37 -0000 Subject: SUSE-SU-2026:4868-1: critical: Security update for webkit2gtk3 Message-ID: <179270121779.838.5748609598687540341@8741a845db10> # Security update for webkit2gtk3 Announcement ID: SUSE-SU-2026:4868-1 Release Date: 2026-10-22T15:23:01Z Rating: critical References: * bsc#1276418 * bsc#1277001 * bsc#1277004 * bsc#1277015 * bsc#1277755 * bsc#1284619 * bsc#1285528 Cross-References: * CVE-2026-64715 * CVE-2026-64718 * CVE-2026-65335 * CVE-2026-78376 * CVE-2026-83596 * CVE-2026-9983 * CVE-2026-9998 CVSS scores: * CVE-2026-64715 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64715 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64715 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-64718 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-65335 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-65335 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-78376 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78376 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-78376 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-83596 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9983 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9983 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-9998 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-9998 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-9998 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for webkit2gtk3 fixes the following issues: Security issues fixed: * CVE-2026-64718: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277001). * CVE-2026-65335: webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash (bsc#1277015). * CVE-2026-78376: use-after-free of `JSCValue` function parameters (bsc#1276418). * CVE-2026-83596: webkitgtk: Validate the full FeatureList array once in OpenTypeVerticalData findFeature (bsc#1277755). Non security issue fixed: * libjavascriptcoregtk-4_0-18: JSGlobalContextCreate() aborts on aarch64 64 KB-page kernel (bsc#1285528). * Build with -DUSE_64KB_PAGE_BLOCK=ON on aarch64 (bsc#1285528). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4868 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4868 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4868 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4868 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4868 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4868 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4868 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4868 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4868 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * webkit2gtk4-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-minibrowser-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * webkit-jsc-4.1-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * webkit-jsc-4-2.54.1-150400.4.157.5 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkit-jsc-4.1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * webkit-jsc-6.0-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-minibrowser-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-6_0-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-minibrowser-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * typelib-1_0-WebKitWebProcessExtension-6_0-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk3-minibrowser-debuginfo-2.54.1-150400.4.157.4 * webkit-jsc-4-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-WebKit-6_0-2.54.1-150400.4.157.4 * webkit-jsc-6.0-2.54.1-150400.4.157.4 * webkit2gtk3-minibrowser-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-minibrowser-2.54.1-150400.4.157.5 * openSUSE Leap 15.4 (x86_64) * libwebkit2gtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-32bit-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-32bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-32bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-32bit-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-32bit-debuginfo-2.54.1-150400.4.157.5 * libwebkit2gtk-4_1-0-32bit-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (aarch64_ilp32) * libwebkit2gtk-4_1-0-64bit-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-64bit-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-64bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_0-18-64bit-2.54.1-150400.4.157.5 * libwebkit2gtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-64bit-debuginfo-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-64bit-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-64bit-2.54.1-150400.4.157.4 * openSUSE Leap 15.4 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * typelib-1_0-JavaScriptCore-4_1-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-2.54.1-150400.4.157.5 * libwebkit2gtk-4_0-37-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-devel-2.54.1-150400.4.157.5 * libjavascriptcoregtk-4_1-0-2.54.1-150400.4.157.4 * webkit2gtk3-debugsource-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2WebExtension-4_1-2.54.1-150400.4.157.4 * webkit2gtk-4_1-injected-bundles-debuginfo-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-2.54.1-150400.4.157.4 * typelib-1_0-WebKit2-4_0-2.54.1-150400.4.157.5 * libjavascriptcoregtk-6_0-1-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_0-18-debuginfo-2.54.1-150400.4.157.5 * webkit2gtk3-soup2-debugsource-2.54.1-150400.4.157.5 * webkit2gtk-4_0-injected-bundles-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2-4_1-2.54.1-150400.4.157.4 * webkitgtk-6_0-injected-bundles-2.54.1-150400.4.157.4 * libjavascriptcoregtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libwebkitgtk-6_0-4-debuginfo-2.54.1-150400.4.157.4 * webkit2gtk4-debugsource-2.54.1-150400.4.157.4 * webkit2gtk3-devel-2.54.1-150400.4.157.4 * libwebkit2gtk-4_0-37-debuginfo-2.54.1-150400.4.157.5 * typelib-1_0-WebKit2WebExtension-4_0-2.54.1-150400.4.157.5 * webkit2gtk-4_1-injected-bundles-2.54.1-150400.4.157.4 * libwebkit2gtk-4_1-0-debuginfo-2.54.1-150400.4.157.4 * libjavascriptcoregtk-6_0-1-debuginfo-2.54.1-150400.4.157.4 * typelib-1_0-JavaScriptCore-4_0-2.54.1-150400.4.157.5 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * WebKitGTK-4.1-lang-2.54.1-150400.4.157.4 * WebKitGTK-4.0-lang-2.54.1-150400.4.157.5 * WebKitGTK-6.0-lang-2.54.1-150400.4.157.4 ## References: * https://www.suse.com/security/cve/CVE-2026-64715.html * https://www.suse.com/security/cve/CVE-2026-64718.html * https://www.suse.com/security/cve/CVE-2026-65335.html * https://www.suse.com/security/cve/CVE-2026-78376.html * https://www.suse.com/security/cve/CVE-2026-83596.html * https://www.suse.com/security/cve/CVE-2026-9983.html * https://www.suse.com/security/cve/CVE-2026-9998.html * https://bugzilla.suse.com/show_bug.cgi?id=1276418 * https://bugzilla.suse.com/show_bug.cgi?id=1277001 * https://bugzilla.suse.com/show_bug.cgi?id=1277004 * https://bugzilla.suse.com/show_bug.cgi?id=1277015 * https://bugzilla.suse.com/show_bug.cgi?id=1277755 * https://bugzilla.suse.com/show_bug.cgi?id=1284619 * https://bugzilla.suse.com/show_bug.cgi?id=1285528 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:34:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:34:35 -0000 Subject: SUSE-SU-2026:4866-1: important: Security update for go1.26-openssl Message-ID: <179270127528.838.7689031475462045949@8741a845db10> # Security update for go1.26-openssl Announcement ID: SUSE-SU-2026:4866-1 Release Date: 2026-10-22T14:38:05Z Rating: important References: * bsc#1255111 * bsc#1284766 * bsc#1284767 * bsc#1284768 * bsc#1284769 * bsc#1284770 * bsc#1284771 * bsc#1284772 * bsc#1284773 * bsc#1284774 * bsc#1284775 * bsc#1284776 * bsc#1284777 * bsc#1284778 * bsc#1284779 * bsc#1284780 * bsc#1286261 * bsc#1286317 * jsc#SLE-18320 Cross-References: * CVE-2026-111943 * CVE-2026-56857 * CVE-2026-56866 * CVE-2026-78659 * CVE-2026-78660 * CVE-2026-78663 * CVE-2026-78667 * CVE-2026-78669 * CVE-2026-94439 * CVE-2026-94440 * CVE-2026-94444 * CVE-2026-94447 * CVE-2026-94448 * CVE-2026-97030 * CVE-2026-97031 * CVE-2026-97032 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56857 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-56857 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-56866 ( SUSE ): 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-56866 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78659 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78659 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78660 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78660 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78667 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78667 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94439 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-94439 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-94440 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94440 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94444 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94447 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94448 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-94448 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( SUSE ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97030 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N * CVE-2026-97031 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97031 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97032 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Development Tools Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves 16 vulnerabilities, contains one feature and has two security fixes can now be installed. ## Description: This update for go1.26-openssl fixes the following issues: Update to version 1.26.10 (bsc#1255111, jsc#SLE-18320): * CVE-2026-56857: os: Root.Mkdir(All) can follow junctions out of the root on Windows (bsc#1284766). * CVE-2026-56866: net/http: HTTP/1 client connection desynchronization after CONNECT rejection (bsc#1284767). * CVE-2026-78659: net/http: HTTP/2 server memory exhaustion due to Trailer headers (bsc#1284768). * CVE-2026-78660: net/http: HTTP/2 transport accepts malformed framing-related headers (bsc#1284769). * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78667: net/http: lack of limit on size of parsed Range headers (bsc#1284771). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-94439: net/http: HTTP/1 server connection desynchronization after 2xx CONNECT response (bsc#1284773). * CVE-2026-94440: net/textproto, mime/multipart: memory limit bypass when parsing MIME headers (bsc#1284774). * CVE-2026-94444: cmd/go: checksum bypass for golang.org/fips140 (bsc#1284775). * CVE-2026-94447: cmd/go: checksum database bypass for golang.org/toolchain (bsc#1284776). * CVE-2026-94448: html/template: reset context tracking on consecutive template expressions (bsc#1284777). * CVE-2026-97030: html/template: recognize yield as regexp preceder keyword (bsc#1284778). * CVE-2026-97031: crypto/tls: reject malformed ECH outer extension references (bsc#1284779). * CVE-2026-97032: net/http: HTTP/2 server crash due to HPACK encoder race (bsc#1284780). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). Changes: * go#81144 runtime: mutex profiling can deadlock Windows asynchronous preemption during GC * go#81225 runtime: netpoll: eventfd ready for something unexpected * go#81251 lib/fips140: fix ML-KEM CAST and re-seal v1.26.0 * go#81295 cmd/compile: internal compiler error: MoveLoop too small * go#81318 os,internal/poll: NewFile on an inherited overlapped stdout pipe hangs a sibling's WriteFile (Windows) * go#81401 os: go 1.25.x regression on RemoveAll for oldest Windows 10 build 10240 * go#81436 runtime: intermittent SIGBUS (unaligned access) in netpoll on mips64le (Go 1.27) * go#81668 cmd/compile: go1.27 miscompiles &slice[i].Field on an append-built slice; returned pointer aliases reused memory * go#81689 cmd/compile: slice allocation reuses stack backing store incorrectly * go#81860 cmd/go: vet reports no diagnostics for a package that an earlier run vetted as a dependency * go#81889 cmd/link: plugin.Open fails on macOS 27: LC_DYLD_CHAINED_FIXUPS seg_count not updated after combining DWARF * go#81152 cmd/compile/internal/test: TestMergeLocalsIntegration failures * go#81113 debug/elf: applyRelocationsPPC was broken by CL 705075 * go#80889 os: TestRootMultiMkdirAllShallow failures on openbsd * go#80851 cmd/go: pseudo #cgo directive FFLAGS value mixed up with CXXFLAGS in Go 1.26 * go#80827 runtime: async preemption corrupts AVX (YMM) state on netbsd/amd64 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4866 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4866 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4866 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4866 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * go1.26-openssl-race-1.26.10-150600.13.18.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * go1.26-openssl-doc-1.26.10-150600.13.18.1 * go1.26-openssl-1.26.10-150600.13.18.1 * go1.26-openssl-race-1.26.10-150600.13.18.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-56857.html * https://www.suse.com/security/cve/CVE-2026-56866.html * https://www.suse.com/security/cve/CVE-2026-78659.html * https://www.suse.com/security/cve/CVE-2026-78660.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78667.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-94439.html * https://www.suse.com/security/cve/CVE-2026-94440.html * https://www.suse.com/security/cve/CVE-2026-94444.html * https://www.suse.com/security/cve/CVE-2026-94447.html * https://www.suse.com/security/cve/CVE-2026-94448.html * https://www.suse.com/security/cve/CVE-2026-97030.html * https://www.suse.com/security/cve/CVE-2026-97031.html * https://www.suse.com/security/cve/CVE-2026-97032.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284766 * https://bugzilla.suse.com/show_bug.cgi?id=1284767 * https://bugzilla.suse.com/show_bug.cgi?id=1284768 * https://bugzilla.suse.com/show_bug.cgi?id=1284769 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284771 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1284773 * https://bugzilla.suse.com/show_bug.cgi?id=1284774 * https://bugzilla.suse.com/show_bug.cgi?id=1284775 * https://bugzilla.suse.com/show_bug.cgi?id=1284776 * https://bugzilla.suse.com/show_bug.cgi?id=1284777 * https://bugzilla.suse.com/show_bug.cgi?id=1284778 * https://bugzilla.suse.com/show_bug.cgi?id=1284779 * https://bugzilla.suse.com/show_bug.cgi?id=1284780 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 * https://jira.suse.com/browse/SLE-18320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:32:48 -0000 Subject: SUSE-SU-2026:24255-1: moderate: Security update for p11-kit Message-ID: <179270116836.838.16696897082625679955@8741a845db10> # Security update for p11-kit Announcement ID: SUSE-SU-2026:24255-1 Release Date: 2026-10-15T12:14:52Z Rating: moderate References: * bsc#1269664 * bsc#1280702 Cross-References: * CVE-2026-13757 * CVE-2026-18938 CVSS scores: * CVE-2026-13757 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-13757 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18938 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for p11-kit fixes the following issues: * CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing (bsc#1269664). * CVE-2026-18938: integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (bsc#1280702). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1919 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1919 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * p11-kit-devel-0.25.5-160000.3.1 * p11-kit-server-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-nss-trust-0.25.5-160000.3.1 * p11-kit-server-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * libp11-kit0-0.25.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * p11-kit-devel-0.25.5-160000.3.1 * p11-kit-server-debuginfo-0.25.5-160000.3.1 * p11-kit-tools-0.25.5-160000.3.1 * libp11-kit0-debuginfo-0.25.5-160000.3.1 * p11-kit-0.25.5-160000.3.1 * p11-kit-debuginfo-0.25.5-160000.3.1 * p11-kit-debugsource-0.25.5-160000.3.1 * p11-kit-nss-trust-0.25.5-160000.3.1 * p11-kit-server-0.25.5-160000.3.1 * p11-kit-tools-debuginfo-0.25.5-160000.3.1 * libp11-kit0-0.25.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-13757.html * https://www.suse.com/security/cve/CVE-2026-18938.html * https://bugzilla.suse.com/show_bug.cgi?id=1269664 * https://bugzilla.suse.com/show_bug.cgi?id=1280702 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:33:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:33:17 -0000 Subject: SUSE-SU-2026:4862-1: important: Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Message-ID: <179270119740.838.16827644424359019524@8741a845db10> # Security update for the Linux Kernel (Live Patch 29 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4862-1 Release Date: 2026-10-22T15:41:07Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.125 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4862 SUSE-SLE- Module-Live-Patching-15-SP6-2026-4865 SUSE-SLE-Module-Live- Patching-15-SP6-2026-4869 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4865 SUSE-2026-4869 SUSE-2026-4862 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-7-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_115-default-debuginfo-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_27-debugsource-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_29-debugsource-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-debuginfo-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_115-default-7-150600.2.1 * kernel-livepatch-6_4_0-150600_23_125-default-debuginfo-5-150600.2.1 * kernel-livepatch-6_4_0-150600_23_118-default-7-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_28-debugsource-7-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 22 20:32:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 22 Oct 2026 20:32:40 -0000 Subject: SUSE-SU-2026:24256-1: important: Security update for nvidia-open-driver-G07-signed Message-ID: <179270116026.838.2465700071539737@8741a845db10> # Security update for nvidia-open-driver-G07-signed Announcement ID: SUSE-SU-2026:24256-1 Release Date: 2026-10-15T16:52:35Z Rating: important References: * bsc#1270255 * bsc#1271601 * bsc#1278022 * bsc#1280057 * bsc#1283265 Cross-References: * CVE-2026-47489 * CVE-2026-47491 * CVE-2026-47492 * CVE-2026-47494 * CVE-2026-47500 * CVE-2026-47501 * CVE-2026-47502 * CVE-2026-47504 * CVE-2026-47507 * CVE-2026-47508 * CVE-2026-47509 * CVE-2026-47510 * CVE-2026-47511 * CVE-2026-47512 * CVE-2026-47513 * CVE-2026-47514 * CVE-2026-47515 * CVE-2026-47516 * CVE-2026-47517 * CVE-2026-47518 * CVE-2026-47522 * CVE-2026-47523 * CVE-2026-47524 * CVE-2026-47525 * CVE-2026-47526 * CVE-2026-47527 * CVE-2026-47528 * CVE-2026-47529 * CVE-2026-47530 * CVE-2026-47531 * CVE-2026-47532 * CVE-2026-47533 * CVE-2026-47534 * CVE-2026-47537 * CVE-2026-47538 * CVE-2026-47540 * CVE-2026-47542 * CVE-2026-47543 * CVE-2026-47545 * CVE-2026-47546 * CVE-2026-47547 * CVE-2026-47548 * CVE-2026-47549 * CVE-2026-47551 * CVE-2026-47552 * CVE-2026-47553 * CVE-2026-47554 * CVE-2026-47555 * CVE-2026-47556 * CVE-2026-47557 * CVE-2026-47558 * CVE-2026-47559 * CVE-2026-47560 * CVE-2026-47561 * CVE-2026-47562 * CVE-2026-47563 * CVE-2026-47564 * CVE-2026-47565 * CVE-2026-47566 * CVE-2026-47567 * CVE-2026-47568 * CVE-2026-47569 * CVE-2026-47572 * CVE-2026-47586 * CVE-2026-47587 * CVE-2026-47588 * CVE-2026-47589 * CVE-2026-47590 * CVE-2026-47591 * CVE-2026-47592 * CVE-2026-47594 * CVE-2026-47595 * CVE-2026-47596 * CVE-2026-47597 * CVE-2026-47598 * CVE-2026-47599 * CVE-2026-47600 * CVE-2026-47601 * CVE-2026-47602 * CVE-2026-47603 * CVE-2026-47604 CVSS scores: * CVE-2026-47489 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47491 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47492 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47494 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47500 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47501 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47509 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47512 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47513 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47514 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47515 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47517 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47518 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L * CVE-2026-47522 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47523 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47524 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47525 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47526 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47527 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47528 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47529 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47530 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47531 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47532 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47533 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47534 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47537 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47538 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47542 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47543 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47545 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47546 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47547 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47551 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47552 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47553 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47554 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-47555 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47557 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47559 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47560 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47561 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47562 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-47563 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47565 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47566 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47567 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47568 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47569 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47586 ( NVD ): 6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47587 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47588 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47589 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47590 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47591 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47592 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47596 ( NVD ): 7.0 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-47597 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47598 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47599 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47600 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-47602 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-47603 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47604 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 81 vulnerabilities can now be installed. ## Description: This update for nvidia-open-driver-G07-signed fixes the following issues: Changes for nvidia-open-driver-G07-signed: * update non-CUDA variant to 595.104.02 (bsc#1283265) * fix build against Linux 7.3.0 (RC) (bsc#1278022) * re-disabled CXL support for now again following NVIDIA's advice (bsc#1280057) * update CUDA variant to 615.71.09 (bsc#1270255) [ CVE-2026-47587, CVE-2026-47567, CVE-2026-47549, CVE-2026-47566, CVE-2026-47596, CVE-2026-47601, CVE-2026-47518, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47534, CVE-2026-47557, CVE-2026-47555, CVE-2026-47517, CVE-2026-47492, CVE-2026-47603, CVE-2026-47604, CVE-2026-47568, CVE-2026-47526, CVE-2026-47531, CVE-2026-47562, CVE-2026-47502, CVE-2026-47504 ] * update non-CUDA variant to 595.91.07 (bsc#1271601, bsc#1270255) CVE-2026-47596, CVE-2026-47601, CVE-2026-47595, CVE-2026-47564, CVE-2026-47491, CVE-2026-47489, CVE-2026-47516, CVE-2026-47572, CVE-2026-47569, CVE-2026-47560, CVE-2026-47563, CVE-2026-47561, CVE-2026-47559, CVE-2026-47558, CVE-2026-47556, CVE-2026-47553, CVE-2026-47552, CVE-2026-47551, CVE-2026-47548, CVE-2026-47545, CVE-2026-47540, CVE-2026-47530, CVE-2026-47528, CVE-2026-47523, CVE-2026-47514, CVE-2026-47513, CVE-2026-47512, CVE-2026-47511, CVE-2026-47510, CVE-2026-47508, CVE-2026-47507, CVE-2026-47501, CVE-2026-47500, CVE-2026-47494, CVE-2026-47600, CVE-2026-47599, CVE-2026-47597, CVE-2026-47588, CVE-2026-47594, CVE-2026-47592, CVE-2026-47591, CVE-2026-47590, CVE-2026-47589, CVE-2026-47554, CVE-2026-47602, CVE-2026-47598, CVE-2026-47533, CVE-2026-47538, CVE-2026-47547, CVE-2026-47546, CVE-2026-47543, CVE-2026-47542, CVE-2026-47537, CVE-2026-47529, CVE-2026-47527, CVE-2026-47525, CVE-2026-47524, CVE-2026-47515, CVE-2026-47509, CVE-2026-47532, CVE-2026-47522, CVE-2026-47586, CVE-2026-47565, CVE-2026-47518, ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1920 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1920 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-default-devel-595.104.02-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * nvidia-open-driver-G07-signed-64kb-devel-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-64kb-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-64kb-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-kmp-64kb-595.104.02_k6.12.0_160000.39-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * nvidia-open-driver-G07-signed-kmp-default-debuginfo-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-debugsource-595.104.02-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-debugsource-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-cuda-default-devel-615.71.09-160000.1.1 * nvidia-open-driver-G07-signed-kmp-default-595.104.02_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-cuda-kmp-default-debuginfo-615.71.09_k6.12.0_160000.39-160000.1.1 * nvidia-open-driver-G07-signed-default-devel-595.104.02-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-47489.html * https://www.suse.com/security/cve/CVE-2026-47491.html * https://www.suse.com/security/cve/CVE-2026-47492.html * https://www.suse.com/security/cve/CVE-2026-47494.html * https://www.suse.com/security/cve/CVE-2026-47500.html * https://www.suse.com/security/cve/CVE-2026-47501.html * https://www.suse.com/security/cve/CVE-2026-47502.html * https://www.suse.com/security/cve/CVE-2026-47504.html * https://www.suse.com/security/cve/CVE-2026-47507.html * https://www.suse.com/security/cve/CVE-2026-47508.html * https://www.suse.com/security/cve/CVE-2026-47509.html * https://www.suse.com/security/cve/CVE-2026-47510.html * https://www.suse.com/security/cve/CVE-2026-47511.html * https://www.suse.com/security/cve/CVE-2026-47512.html * https://www.suse.com/security/cve/CVE-2026-47513.html * https://www.suse.com/security/cve/CVE-2026-47514.html * https://www.suse.com/security/cve/CVE-2026-47515.html * https://www.suse.com/security/cve/CVE-2026-47516.html * https://www.suse.com/security/cve/CVE-2026-47517.html * https://www.suse.com/security/cve/CVE-2026-47518.html * https://www.suse.com/security/cve/CVE-2026-47522.html * https://www.suse.com/security/cve/CVE-2026-47523.html * https://www.suse.com/security/cve/CVE-2026-47524.html * https://www.suse.com/security/cve/CVE-2026-47525.html * https://www.suse.com/security/cve/CVE-2026-47526.html * https://www.suse.com/security/cve/CVE-2026-47527.html * https://www.suse.com/security/cve/CVE-2026-47528.html * https://www.suse.com/security/cve/CVE-2026-47529.html * https://www.suse.com/security/cve/CVE-2026-47530.html * https://www.suse.com/security/cve/CVE-2026-47531.html * https://www.suse.com/security/cve/CVE-2026-47532.html * https://www.suse.com/security/cve/CVE-2026-47533.html * https://www.suse.com/security/cve/CVE-2026-47534.html * https://www.suse.com/security/cve/CVE-2026-47537.html * https://www.suse.com/security/cve/CVE-2026-47538.html * https://www.suse.com/security/cve/CVE-2026-47540.html * https://www.suse.com/security/cve/CVE-2026-47542.html * https://www.suse.com/security/cve/CVE-2026-47543.html * https://www.suse.com/security/cve/CVE-2026-47545.html * https://www.suse.com/security/cve/CVE-2026-47546.html * https://www.suse.com/security/cve/CVE-2026-47547.html * https://www.suse.com/security/cve/CVE-2026-47548.html * https://www.suse.com/security/cve/CVE-2026-47549.html * https://www.suse.com/security/cve/CVE-2026-47551.html * https://www.suse.com/security/cve/CVE-2026-47552.html * https://www.suse.com/security/cve/CVE-2026-47553.html * https://www.suse.com/security/cve/CVE-2026-47554.html * https://www.suse.com/security/cve/CVE-2026-47555.html * https://www.suse.com/security/cve/CVE-2026-47556.html * https://www.suse.com/security/cve/CVE-2026-47557.html * https://www.suse.com/security/cve/CVE-2026-47558.html * https://www.suse.com/security/cve/CVE-2026-47559.html * https://www.suse.com/security/cve/CVE-2026-47560.html * https://www.suse.com/security/cve/CVE-2026-47561.html * https://www.suse.com/security/cve/CVE-2026-47562.html * https://www.suse.com/security/cve/CVE-2026-47563.html * https://www.suse.com/security/cve/CVE-2026-47564.html * https://www.suse.com/security/cve/CVE-2026-47565.html * https://www.suse.com/security/cve/CVE-2026-47566.html * https://www.suse.com/security/cve/CVE-2026-47567.html * https://www.suse.com/security/cve/CVE-2026-47568.html * https://www.suse.com/security/cve/CVE-2026-47569.html * https://www.suse.com/security/cve/CVE-2026-47572.html * https://www.suse.com/security/cve/CVE-2026-47586.html * https://www.suse.com/security/cve/CVE-2026-47587.html * https://www.suse.com/security/cve/CVE-2026-47588.html * https://www.suse.com/security/cve/CVE-2026-47589.html * https://www.suse.com/security/cve/CVE-2026-47590.html * https://www.suse.com/security/cve/CVE-2026-47591.html * https://www.suse.com/security/cve/CVE-2026-47592.html * https://www.suse.com/security/cve/CVE-2026-47594.html * https://www.suse.com/security/cve/CVE-2026-47595.html * https://www.suse.com/security/cve/CVE-2026-47596.html * https://www.suse.com/security/cve/CVE-2026-47597.html * https://www.suse.com/security/cve/CVE-2026-47598.html * https://www.suse.com/security/cve/CVE-2026-47599.html * https://www.suse.com/security/cve/CVE-2026-47600.html * https://www.suse.com/security/cve/CVE-2026-47601.html * https://www.suse.com/security/cve/CVE-2026-47602.html * https://www.suse.com/security/cve/CVE-2026-47603.html * https://www.suse.com/security/cve/CVE-2026-47604.html * https://bugzilla.suse.com/show_bug.cgi?id=1270255 * https://bugzilla.suse.com/show_bug.cgi?id=1271601 * https://bugzilla.suse.com/show_bug.cgi?id=1278022 * https://bugzilla.suse.com/show_bug.cgi?id=1280057 * https://bugzilla.suse.com/show_bug.cgi?id=1283265 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 08:30:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 08:30:24 -0000 Subject: SUSE-SU-2026:4871-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) Message-ID: <179274422429.6226.17810020010661270320@c9d35c2308c0> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4871-1 Release Date: 2026-10-22T20:05:32Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4871 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4872 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4873 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4874 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4875 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_5-debugsource-16-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_9-debugsource-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-debuginfo-13-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-debuginfo-16-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_4-debugsource-19-150700.2.1 * kernel-livepatch-6_4_0-150700_53_31-default-13-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_7-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_8-debugsource-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_19-default-16-150700.2.1 * kernel-livepatch-6_4_0-150700_53_25-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_28-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-debuginfo-19-150700.2.1 * kernel-livepatch-6_4_0-150700_53_16-default-19-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 12:30:12 -0000 Subject: SUSE-SU-2026:4889-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275861209.3565.5726376860900025178@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4889-1 Release Date: 2026-10-23T08:04:31Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4889 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP7_Update_20-debugsource-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-4-150700.2.1 * kernel-livepatch-6_4_0-150700_53_78-default-debuginfo-4-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 12:30:24 -0000 Subject: SUSE-SU-2026:4888-1: important: Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Message-ID: <179275862459.3565.5693723740267633486@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6) Announcement ID: SUSE-SU-2026:4888-1 Release Date: 2026-10-23T07:04:40Z Rating: important References: * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4888 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4888 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-4-150600.2.1 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_130-default-debuginfo-4-150600.2.1 * kernel-livepatch-SLE15-SP6_Update_30-debugsource-4-150600.2.1 * kernel-livepatch-6_4_0-150600_23_130-default-4-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 12:30:43 -0000 Subject: SUSE-SU-2026:4883-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275864378.3565.3555558896645699879@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4883-1 Release Date: 2026-10-23T05:04:30Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.73 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4883 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4885 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_66-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_19-debugsource-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_66-default-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_18-debugsource-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_73-default-debuginfo-5-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 12:30:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 12:30:58 -0000 Subject: SUSE-SU-2026:4887-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) Message-ID: <179275865863.3565.16096340205592604843@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise 15 SP7) Announcement ID: SUSE-SU-2026:4887-1 Release Date: 2026-10-23T06:34:07Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.63 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4887 SUSE-SLE- Module-Live-Patching-15-SP7-2026-4876 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4877 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4878 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4879 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4880 SUSE-SLE-Module-Live-Patching-15-SP7-2026-4881 SUSE- SLE-Module-Live-Patching-15-SP7-2026-4882 SUSE-SLE-Module-Live- Patching-15-SP7-2026-4884 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_45-default-9-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-6-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_11-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-debuginfo-8-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_17-debugsource-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_16-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_22-default-debuginfo-14-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_55-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-debuginfo-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_40-default-10-150700.2.1 * kernel-livepatch-6_4_0-150700_53_34-default-debuginfo-11-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_12-debugsource-10-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_13-debugsource-9-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_6-debugsource-14-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_15-debugsource-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_63-default-debuginfo-6-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_10-debugsource-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_37-default-11-150700.2.1 * kernel-livepatch-6_4_0-150700_53_60-default-debuginfo-7-150700.2.1 * kernel-livepatch-6_4_0-150700_53_45-default-debuginfo-9-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_14-debugsource-8-150700.2.1 * kernel-livepatch-6_4_0-150700_53_52-default-8-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:31:25 -0000 Subject: SUSE-SU-2026:4892-1: important: Security update for the Linux Kernel Message-ID: <179277308575.12145.9175617323199769729@c9d35c2308c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4892-1 Release Date: 2026-10-23T10:48:19Z Rating: important References: * bsc#1252519 * bsc#1255531 * bsc#1255995 * bsc#1256076 * bsc#1264851 * bsc#1272670 * bsc#1273040 * bsc#1273288 * bsc#1273290 * bsc#1273599 * bsc#1273764 * bsc#1274497 * bsc#1274653 * bsc#1274853 * bsc#1275080 * bsc#1275564 * bsc#1275644 * bsc#1275659 * bsc#1275964 * bsc#1276273 * bsc#1276387 * bsc#1276791 * bsc#1276844 * bsc#1276951 * bsc#1277310 * bsc#1277614 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1278313 * bsc#1280259 * bsc#1280387 * bsc#1280966 * bsc#1281058 * bsc#1281280 * bsc#1281771 * bsc#1281819 * bsc#1282744 * bsc#1282755 * bsc#1282762 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1283142 * bsc#1283823 * bsc#1283835 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284581 * bsc#1284606 * bsc#1284746 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2022-50578 * CVE-2023-54158 * CVE-2023-54180 * CVE-2025-68358 * CVE-2026-43299 * CVE-2026-63948 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64456 * CVE-2026-64593 * CVE-2026-68106 * CVE-2026-68233 * CVE-2026-68236 * CVE-2026-68303 * CVE-2026-68323 * CVE-2026-68430 * CVE-2026-72015 * CVE-2026-72236 * CVE-2026-72319 * CVE-2026-72476 * CVE-2026-72493 * CVE-2026-74408 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74653 * CVE-2026-74675 * CVE-2026-80977 * CVE-2026-89542 * CVE-2026-89726 * CVE-2026-89778 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-93252 * CVE-2026-93287 * CVE-2026-93800 * CVE-2026-93820 * CVE-2026-93822 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-98010 * CVE-2026-98077 * CVE-2026-98130 * CVE-2026-98252 * CVE-2026-98269 * CVE-2026-98347 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98365 * CVE-2026-99999 CVSS scores: * CVE-2022-50578 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2022-50578 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-54158 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2023-54158 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-54180 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2023-54180 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63948 ( SUSE ): 2.3 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-63948 ( SUSE ): 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64456 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64456 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64593 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64593 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68106 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68106 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68236 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68236 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68236 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68303 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68430 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72476 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74408 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74408 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74675 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74675 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74675 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89726 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93287 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93287 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 56 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076). * CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995). * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288). * CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497). * CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659). * CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964). * CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784). * CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755). * CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * net: add inline function skb_csum_is_sctp (bsc#1285684). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-4892 * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4892 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4892 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (nosrc) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kernel-default-debugsource-4.12.14-122.336.1 * kernel-default-kgraft-4.12.14-122.336.1 * kgraft-patch-4_12_14-122_336-default-1-8.3.1 * kernel-default-kgraft-devel-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-base-debuginfo-4.12.14-122.336.1 * kernel-default-debugsource-4.12.14-122.336.1 * ocfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-syms-4.12.14-122.336.1 * cluster-md-kmp-default-debuginfo-4.12.14-122.336.1 * cluster-md-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-default-base-4.12.14-122.336.1 * dlm-kmp-default-debuginfo-4.12.14-122.336.1 * ocfs2-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-4.12.14-122.336.1 * kernel-default-devel-4.12.14-122.336.1 * dlm-kmp-default-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * kernel-default-devel-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * kernel-source-4.12.14-122.336.1 * kernel-macros-4.12.14-122.336.1 * kernel-devel-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x) * kernel-default-man-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * kernel-default-base-debuginfo-4.12.14-122.336.1 * kernel-default-devel-debuginfo-4.12.14-122.336.1 * kernel-default-debugsource-4.12.14-122.336.1 * ocfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-syms-4.12.14-122.336.1 * cluster-md-kmp-default-debuginfo-4.12.14-122.336.1 * cluster-md-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-debuginfo-4.12.14-122.336.1 * kernel-default-base-4.12.14-122.336.1 * dlm-kmp-default-debuginfo-4.12.14-122.336.1 * ocfs2-kmp-default-4.12.14-122.336.1 * gfs2-kmp-default-4.12.14-122.336.1 * kernel-default-devel-4.12.14-122.336.1 * dlm-kmp-default-4.12.14-122.336.1 * kernel-default-debuginfo-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (nosrc x86_64) * kernel-default-4.12.14-122.336.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * kernel-source-4.12.14-122.336.1 * kernel-macros-4.12.14-122.336.1 * kernel-devel-4.12.14-122.336.1 ## References: * https://www.suse.com/security/cve/CVE-2022-50578.html * https://www.suse.com/security/cve/CVE-2023-54158.html * https://www.suse.com/security/cve/CVE-2023-54180.html * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-63948.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64456.html * https://www.suse.com/security/cve/CVE-2026-64593.html * https://www.suse.com/security/cve/CVE-2026-68106.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68236.html * https://www.suse.com/security/cve/CVE-2026-68303.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-68430.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72476.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74408.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74675.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89726.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93287.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1252519 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1255995 * https://bugzilla.suse.com/show_bug.cgi?id=1256076 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1272670 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273288 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1274497 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1274853 * https://bugzilla.suse.com/show_bug.cgi?id=1275080 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275659 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276273 * https://bugzilla.suse.com/show_bug.cgi?id=1276387 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276844 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1278313 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281058 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282744 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:31:31 -0000 Subject: SUSE-SU-2026:4897-1: important: Security update for cifs-utils Message-ID: <179277309193.12145.4538927174504318390@c9d35c2308c0> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:4897-1 Release Date: 2026-10-23T10:51:30Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4897 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4897 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cifs-utils-debugsource-6.9-13.32.2 * cifs-utils-6.9-13.32.2 * cifs-utils-debuginfo-6.9-13.32.2 * cifs-utils-devel-6.9-13.32.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * cifs-utils-debugsource-6.9-13.32.2 * cifs-utils-6.9-13.32.2 * cifs-utils-debuginfo-6.9-13.32.2 * cifs-utils-devel-6.9-13.32.2 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:31:43 -0000 Subject: SUSE-SU-2026:4895-1: important: Security update for gimp Message-ID: <179277310321.12145.9981196958259383688@c9d35c2308c0> # Security update for gimp Announcement ID: SUSE-SU-2026:4895-1 Release Date: 2026-10-23T10:51:04Z Rating: important References: * bsc#1277618 * bsc#1277622 * bsc#1284473 * bsc#1284474 * bsc#1284475 Cross-References: * CVE-2026-106061 * CVE-2026-106062 * CVE-2026-106063 * CVE-2026-82328 * CVE-2026-82343 CVSS scores: * CVE-2026-106061 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-106061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-106061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-106062 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-106062 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106062 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106063 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-106063 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-106063 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-82328 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82328 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82328 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82343 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82343 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-82343 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for gimp fixes the following issues: * CVE-2026-82328: undersized palette memory allocations in the ICO loader can cause heap out-of-bounds reads (bsc#1277618). * CVE-2026-82343: improper channel-count handling in the PSD loader can cause heap and stack out-of-bounds reads (bsc#1277622). * CVE-2026-106061: integer overflow in the X cursor thumbnail loader leads to out-of-bounds read and process crash when generating a thumbnail for a crafted XMC file (bsc#1284473). * CVE-2026-106062: heap-based buffer overflow in DirectDraw Surface loader when loading a crafted DDS image (bsc#1284474). * CVE-2026-106063: heap-based buffer overflow in the DICOM export plug-in when exporting an image with extremely large width and height (bsc#1284475). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4895 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4895 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4895 ## Package List: * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-debugsource-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.85.1 * gimp-plugin-aa-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (noarch) * gimp-lang-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (x86_64) * libgimpui-2_0-0-32bit-2.10.30-150400.3.85.1 * libgimp-2_0-0-32bit-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-32bit-2.10.30-150400.3.85.1 * libgimpui-2_0-0-32bit-debuginfo-2.10.30-150400.3.85.1 * openSUSE Leap 15.4 (aarch64_ilp32) * libgimpui-2_0-0-64bit-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-64bit-2.10.30-150400.3.85.1 * libgimpui-2_0-0-64bit-2.10.30-150400.3.85.1 * libgimp-2_0-0-64bit-debuginfo-2.10.30-150400.3.85.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-debugsource-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * SUSE Linux Enterprise Workstation Extension 15 SP7 (noarch) * gimp-lang-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x) * gimp-debugsource-2.10.30-150400.3.85.1 * gimp-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimp-2_0-0-debuginfo-2.10.30-150400.3.85.1 * libgimpui-2_0-0-2.10.30-150400.3.85.1 * libgimp-2_0-0-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (aarch64) * gimp-devel-debuginfo-2.10.30-150400.3.85.1 * gimp-plugin-aa-debuginfo-2.10.30-150400.3.85.1 * gimp-2.10.30-150400.3.85.1 * gimp-plugin-aa-2.10.30-150400.3.85.1 * gimp-devel-2.10.30-150400.3.85.1 * SUSE Package Hub 15 15-SP7 (noarch) * gimp-lang-2.10.30-150400.3.85.1 ## References: * https://www.suse.com/security/cve/CVE-2026-106061.html * https://www.suse.com/security/cve/CVE-2026-106062.html * https://www.suse.com/security/cve/CVE-2026-106063.html * https://www.suse.com/security/cve/CVE-2026-82328.html * https://www.suse.com/security/cve/CVE-2026-82343.html * https://bugzilla.suse.com/show_bug.cgi?id=1277618 * https://bugzilla.suse.com/show_bug.cgi?id=1277622 * https://bugzilla.suse.com/show_bug.cgi?id=1284473 * https://bugzilla.suse.com/show_bug.cgi?id=1284474 * https://bugzilla.suse.com/show_bug.cgi?id=1284475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:51 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:31:51 -0000 Subject: SUSE-SU-2026:4893-1: important: Security update for emacs Message-ID: <179277311198.12145.14571106119867715220@c9d35c2308c0> # Security update for emacs Announcement ID: SUSE-SU-2026:4893-1 Release Date: 2026-10-23T10:50:20Z Rating: important References: * bsc#1275927 * bsc#1284345 * bsc#1284990 Cross-References: * CVE-2026-108976 * CVE-2026-79992 CVSS scores: * CVE-2026-108976 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-108976 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-108976 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79992 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-79992 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities and has one security fix can now be installed. ## Description: This update for emacs fixes the following issues: * CVE-2026-79992: zero-click local command execution via TRAMP (bsc#1275927). * CVE-2026-108976: flawed username input regex validation in TRAMP can cause arbitrary OS command injection (bsc#1284345, bsc#1284990). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4893 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4893 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4893 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4893 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4893 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4893 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4893 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4893 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4893 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4893 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4893 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4893 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4893 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * openSUSE Leap 15.4 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * Basesystem Module 15-SP7 (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * emacs-debugsource-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * etags-debuginfo-27.2-150400.3.37.1 * emacs-x11-debuginfo-27.2-150400.3.37.1 * emacs-x11-27.2-150400.3.37.1 * emacs-nox-debuginfo-27.2-150400.3.37.1 * emacs-27.2-150400.3.37.1 * emacs-debugsource-27.2-150400.3.37.1 * etags-27.2-150400.3.37.1 * emacs-debuginfo-27.2-150400.3.37.1 * emacs-nox-27.2-150400.3.37.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * emacs-el-27.2-150400.3.37.1 * emacs-info-27.2-150400.3.37.1 ## References: * https://www.suse.com/security/cve/CVE-2026-108976.html * https://www.suse.com/security/cve/CVE-2026-79992.html * https://bugzilla.suse.com/show_bug.cgi?id=1275927 * https://bugzilla.suse.com/show_bug.cgi?id=1284345 * https://bugzilla.suse.com/show_bug.cgi?id=1284990 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:31:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:31:59 -0000 Subject: SUSE-SU-2026:4891-1: important: Security update for aws-iam-authenticator Message-ID: <179277311965.12145.15113497590803624709@c9d35c2308c0> # Security update for aws-iam-authenticator Announcement ID: SUSE-SU-2026:4891-1 Release Date: 2026-10-23T10:47:07Z Rating: important References: * bsc#1272130 * bsc#1285302 Cross-References: * CVE-2026-56852 * CVE-2026-78669 CVSS scores: * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * Public Cloud Module 15-SP4 * Public Cloud Module 15-SP5 * Public Cloud Module 15-SP6 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves two vulnerabilities can now be installed. ## Description: This update for aws-iam-authenticator fixes the following issues: * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1272130). * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285302). Changes for aws-iam-authenticator: * Updated to version 0.7.22 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2026-4891 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2026-4891 * Public Cloud Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2026-4891 * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4891 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP5 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP6 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 * Public Cloud Module 15-SP7 (aarch64 ppc64le s390x x86_64) * aws-iam-authenticator-0.7.22-150000.1.23.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1272130 * https://bugzilla.suse.com/show_bug.cgi?id=1285302 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 23 16:32:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 23 Oct 2026 16:32:05 -0000 Subject: SUSE-SU-2026:4890-1: important: Security update for cpupower Message-ID: <179277312580.12145.6452850874926976531@c9d35c2308c0> # Security update for cpupower Announcement ID: SUSE-SU-2026:4890-1 Release Date: 2026-10-23T10:46:05Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * Release to latest kernel-source including: * intel-speed-select: Harden daemon pidfile open (CVE-2026-80663 bsc#1278335) * cpupower: Fix incorrect size in cpuidle_state_disable() * cpupower: fix error return value in cpupower_write_sysfs() * cpupower: Fix a bug where the -t option of the set subcommand was not working * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4890 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libcpupower1-6.4.0-150700.9.6.2 * cpupower-debugsource-6.4.0-150700.9.6.2 * cpupower-devel-6.4.0-150700.9.6.2 * cpupower-debuginfo-6.4.0-150700.9.6.2 * cpupower-6.4.0-150700.9.6.2 * libcpupower1-debuginfo-6.4.0-150700.9.6.2 * Basesystem Module 15-SP7 (noarch) * cpupower-bash-completion-6.4.0-150700.9.6.2 * cpupower-lang-6.4.0-150700.9.6.2 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:30:04 -0000 Subject: SUSE-SU-2026:4903-1: important: Security update for cosign Message-ID: <179300340446.6825.8339007991778849026@3c67540d6a94> # Security update for cosign Announcement ID: SUSE-SU-2026:4903-1 Release Date: 2026-10-25T14:05:55Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for cosign rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4903 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4903 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4903 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4903 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4903 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4903 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4903 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4903 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4903 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4903 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4903 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4903 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * openSUSE Leap 15.4 (noarch) * cosign-zsh-completion-3.1.3-150400.3.59.1 * cosign-fish-completion-3.1.3-150400.3.59.1 * cosign-bash-completion-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cosign-3.1.3-150400.3.59.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 * Basesystem Module 15-SP7 (noarch) * cosign-zsh-completion-3.1.3-150400.3.59.1 * cosign-bash-completion-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cosign-3.1.3-150400.3.59.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cosign-debuginfo-3.1.3-150400.3.59.1 * cosign-3.1.3-150400.3.59.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:30:22 -0000 Subject: SUSE-SU-2026:24357-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300342277.6825.13489723623182797075@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24357-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-718 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-42-rt-9-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:30:37 -0000 Subject: SUSE-SU-2026:24356-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300343702.6825.11342083692786289293@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24356-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-717 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-8-1.2 * kernel-livepatch-6_4_0-45-rt-8-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-8-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:30:48 -0000 Subject: SUSE-SU-2026:24355-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300344800.6825.8653357730248632841@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24355-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-716 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-46-rt-8-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:30:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:30:59 -0000 Subject: SUSE-SU-2026:24354-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300345916.6825.15870119327718273715@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24354-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-715 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:31:10 -0000 Subject: SUSE-SU-2026:24353-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300347026.6825.11964745627044521115@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24353-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-714 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-43-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-8-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:31:20 -0000 Subject: SUSE-SU-2026:24352-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300348079.6825.12739747626704478309@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24352-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-713 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-47-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:31:31 -0000 Subject: SUSE-SU-2026:24351-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300349142.6825.7265239355740094737@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24351-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-712 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:31:41 -0000 Subject: SUSE-SU-2026:24350-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300350114.6825.9769669758238136156@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24350-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-711 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-49-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:31:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:31:50 -0000 Subject: SUSE-SU-2026:24349-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300351058.6825.107575248659299038@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24349-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-710 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-rt-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:01 -0000 Subject: SUSE-SU-2026:24348-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300352154.6825.17107845803056684346@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24348-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-693 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-36-rt-18-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-18-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:13 -0000 Subject: SUSE-SU-2026:24347-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300353324.6825.12502730670987552327@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24347-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-692 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-37-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-37-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:23 -0000 Subject: SUSE-SU-2026:24346-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300354361.6825.4909060054481587082@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24346-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-691 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-38-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:34 -0000 Subject: SUSE-SU-2026:24345-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300355450.6825.5042586056925237118@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24345-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-690 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-39-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-39-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:45 -0000 Subject: SUSE-SU-2026:24344-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300356538.6825.11228824404124242189@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24344-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-700 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-45-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:32:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:32:56 -0000 Subject: SUSE-SU-2026:24343-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300357635.6825.2024601997550710579@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24343-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-689 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-40-rt-12-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:07 -0000 Subject: SUSE-SU-2026:24342-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300358742.6825.10035180265499413947@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24342-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-699 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-46-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:18 -0000 Subject: SUSE-SU-2026:24341-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300359838.6825.6026428649910608702@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24341-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-698 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:30 -0000 Subject: SUSE-SU-2026:24340-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300361033.6825.7070603633902642005@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24340-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-697 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-default-6-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:39 -0000 Subject: SUSE-SU-2026:24339-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300361996.6825.6405313841150070222@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24339-1 Release Date: 2026-10-19T12:04:18Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-695 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-5-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:49 -0000 Subject: SUSE-SU-2026:24338-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300362962.6825.6586759097303871661@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24338-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-696 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-default-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:33:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:33:56 -0000 Subject: SUSE-SU-2026:24337-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300363648.6825.9045257781040456628@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24337-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-694 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-4-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:03 -0000 Subject: SUSE-SU-2026:24336-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300364347.6825.15218926624318774918@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24336-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-688 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-51-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-4-1.1 * kernel-livepatch-6_4_0-51-rt-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:14 -0000 Subject: SUSE-SU-2026:24335-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300365427.6825.4770957817815341827@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24335-1 Release Date: 2026-10-19T12:02:24Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-709 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-18-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-18-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:25 -0000 Subject: SUSE-SU-2026:24334-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300366546.6825.8432613308427316400@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24334-1 Release Date: 2026-10-19T12:02:24Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-708 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-16-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-16-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-16-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:37 -0000 Subject: SUSE-SU-2026:24333-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300367759.6825.17130905568359186485@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24333-1 Release Date: 2026-10-19T12:02:19Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-707 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-14-1.2 * kernel-livepatch-6_4_0-38-default-14-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-14-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:48 -0000 Subject: SUSE-SU-2026:24332-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300368835.6825.8012181930410022100@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24332-1 Release Date: 2026-10-19T12:02:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-706 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-39-default-13-1.1 * kernel-livepatch-MICRO-6-0_Update_16-debugsource-13-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:34:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:34:59 -0000 Subject: SUSE-SU-2026:24331-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300369937.6825.8702896896033870352@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24331-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-705 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_17-debugsource-12-1.1 * kernel-livepatch-6_4_0-40-default-12-1.1 * kernel-livepatch-6_4_0-40-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:35:09 -0000 Subject: SUSE-SU-2026:24330-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300370970.6825.3774824133191587504@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24330-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-704 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:35:21 -0000 Subject: SUSE-SU-2026:24329-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300372177.6825.9757295128023309509@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24329-1 Release Date: 2026-10-19T12:02:01Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-703 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_19-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-default-9-1.1 * kernel-livepatch-6_4_0-42-default-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:35:32 -0000 Subject: SUSE-SU-2026:24328-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300373260.6825.5268062608117182956@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24328-1 Release Date: 2026-10-19T12:02:01Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-702 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-43-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:35:43 -0000 Subject: SUSE-SU-2026:24327-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300374366.6825.7245213526276264026@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24327-1 Release Date: 2026-10-19T12:01:54Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-701 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-44-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:35:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:35:53 -0000 Subject: SUSE-SU-2026:24326-1: important: Security update for glibc Message-ID: <179300375325.6825.6347691684924141585@3c67540d6a94> # Security update for glibc Announcement ID: SUSE-SU-2026:24326-1 Release Date: 2026-10-19T08:29:48Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-936 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * glibc-locale-base-2.38-159998.1.1 * glibc-locale-base-debuginfo-2.38-159998.1.1 * glibc-2.38-159998.1.1 * glibc-devel-2.38-159998.1.1 * glibc-locale-2.38-159998.1.1 * glibc-debuginfo-2.38-159998.1.1 * glibc-devel-debuginfo-2.38-159998.1.1 * glibc-debugsource-2.38-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:36:06 -0000 Subject: SUSE-SU-2026:24325-1: important: Security update for python311 Message-ID: <179300376648.6825.9384577110155106580@3c67540d6a94> # Security update for python311 Announcement ID: SUSE-SU-2026:24325-1 Release Date: 2026-10-19T08:20:50Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-938 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libpython3_11-1_0-debuginfo-3.11.17-159998.1.1 * python311-core-debugsource-3.11.17-159998.1.1 * python311-base-debuginfo-3.11.17-159998.1.1 * libpython3_11-1_0-3.11.17-159998.1.1 * python311-curses-debuginfo-3.11.17-159998.1.1 * python311-base-3.11.17-159998.1.1 * python311-3.11.17-159998.1.1 * python311-debugsource-3.11.17-159998.1.1 * python311-debuginfo-3.11.17-159998.1.1 * python311-curses-3.11.17-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:36:42 -0000 Subject: SUSE-SU-2026:24323-1: important: Security update for expat Message-ID: <179300380246.6825.1158376894581963085@3c67540d6a94> # Security update for expat Announcement ID: SUSE-SU-2026:24323-1 Release Date: 2026-10-17T13:48:59Z Rating: important References: * bsc#1249584 * bsc#1257144 * bsc#1257496 * bsc#1259711 * bsc#1259726 * bsc#1259729 * bsc#1262263 * bsc#1264713 * bsc#1267631 * bsc#1268572 * bsc#1268573 * bsc#1275115 * bsc#1275594 * bsc#1275732 * bsc#1275859 * bsc#1275860 * bsc#1275915 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2016-0718 * CVE-2016-9063 * CVE-2022-43680 * CVE-2023-52425 * CVE-2024-8176 * CVE-2025-59375 * CVE-2026-102633 * CVE-2026-24515 * CVE-2026-25210 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-41080 * CVE-2026-45186 * CVE-2026-50219 * CVE-2026-56131 * CVE-2026-56132 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-56406 * CVE-2026-56407 * CVE-2026-56408 * CVE-2026-56409 * CVE-2026-56410 * CVE-2026-56411 * CVE-2026-56412 * CVE-2026-66046 * CVE-2026-72522 * CVE-2026-76641 * CVE-2026-76956 * CVE-2026-76957 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-0718 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2016-9063 ( NVD ): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2022-43680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52425 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-8176 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-8176 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-59375 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-59375 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-24515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-24515 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-24515 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-25210 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-25210 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-25210 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-25210 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41080 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-41080 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41080 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-45186 ( SUSE ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45186 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-50219 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-50219 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56131 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56132 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56132 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56406 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56407 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56408 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56409 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2026-56409 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L * CVE-2026-56410 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-56410 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56411 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56412 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-56412 ( NVD ): 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-66046 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-66046 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-66046 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-66046 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72522 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72522 ( NVD ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76641 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-76641 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76956 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-76957 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76957 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-76957 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 34 vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2025-59375: denial of service (resource consumption) caused by processing malformed small documents (bsc#1249584). * CVE-2026-24515: NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser (bsc#1257144). * CVE-2026-25210: lack of buffer size check can lead to an integer overflow (bsc#1257496). * CVE-2026-32776: NULL pointer dereference when processing empty external parameter entities inside an entity declaration value (bsc#1259726). * CVE-2026-32777: denial of service due to infinite loop in DTD content parsing (bsc#1259711). * CVE-2026-32778: NULL pointer dereference in `setContext` on retry after an out-of-memory condition (bsc#1259729). * CVE-2026-41080: crafted XML document can cause a denial of service (bsc#1262263). * CVE-2026-45186: denial of service via moderately sized crafted XML input (bsc#1264713). * CVE-2026-50219: lack of handler call depth tracking for calls to XML_* functions from within handlers in cases of a policy violation (bsc#1267631). * CVE-2026-56131: lack of handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation (bsc#1268572). * CVE-2026-56132: heap-based buffer overflow in doProlog in xmlparse.c (bsc#1268573). * CVE-2026-56403,CVE-2026-56404,CVE-2026-56405,CVE-2026-56406, CVE-2026-56407,CVE-2026-56408,CVE-2026-56409,CVE-2026-56410, CVE-2026-56411,CVE-2026-56412: multiple integer overflow vulnerabilities (bsc#1275115). * CVE-2026-66046: denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function (bsc#1275732). * CVE-2026-72522: out-of-bounds read and resultant infinite loop due to low surrogates being treated the same as high surrogates during Unicode processing (bsc#1275594). * CVE-2026-76641: out-of-bounds read vulnerability that allows attackers to trigger memory corruption (bsc#1275915). * CVE-2026-76956: denial of service via hash flooding attacks (bsc#1275860). * CVE-2026-76957: lack of handler call depth tracking with custom encoding callbacks. Thus, a use- after-free can occur (bsc#1275859). * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: Denial of Service via integer overflow in expat_realloc (bsc#1283493). Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated * CMake: only add /source-charset:utf-8 when /utf-8 is not present * lib: resolve undefined behavior from overshifting a signed int * lib: support read-only hash table lookup with non-zero-terminated keys * lib: use a C99 bool for ENTITY.open * version info bumped from 13:3:12 to 13:4:12 * fix support for 2+ GiB documents (regression from 2.8.2) * reject empty version in the XML declaration * fix printf format for AIX * CMake|AIX: enable EXPAT_DEV_URANDOM by default * version info bumped from 13:2:12 to 13:3:12 * Existing API function XML_SetHashSalt is now deprecated * because of its limitations, and its use should be * considered a vulnerability. Please either use the new API * function XML_SetHashSalt16Bytes (with known-high-quality * entropy input only!) instead, or leave the derivation of * a 16-bytes hash salt from high quality entropy to Expat's * internal machinery (by _not_ calling either of the two * XML_SetHashSalt* functions). * xmlwf: Fix a memory leak * WASI: Fix format specifiers for 32bit WASI SDK * Fix alignment of internal allocations for some non-amd64 architectures (e.g. sparc32); fixes up on the fix to CVE-2025-59375 (of Expat 2.7.2) * Fix a class of false positives where input should have been rejected with error XML_ERROR_ASYNC_ENTITY; regression from CVE-2024-8176 (of Expat 2.7.0) * Prove and regression-proof absence of integer overflow from function expat_realloc * Remove "harmless" cast that truncated a size_t to unsigned * xmlwf: Resolve use of functions XML_GetErrorLineNumber and XML_GetErrorColumnNumber * CVE-2025-59375 -- Disallow use of disproportional amounts of dynamic memory from within an Expat parser * xmlwf: Fix (internal) help generator * xmlwf: Mention supported environment variables in ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-935 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libexpat1-debuginfo-2.8.5-159998.1.1 * libexpat1-2.8.5-159998.1.1 * expat-debugsource-2.8.5-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2016-0718.html * https://www.suse.com/security/cve/CVE-2016-9063.html * https://www.suse.com/security/cve/CVE-2022-43680.html * https://www.suse.com/security/cve/CVE-2023-52425.html * https://www.suse.com/security/cve/CVE-2024-8176.html * https://www.suse.com/security/cve/CVE-2025-59375.html * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-24515.html * https://www.suse.com/security/cve/CVE-2026-25210.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-41080.html * https://www.suse.com/security/cve/CVE-2026-45186.html * https://www.suse.com/security/cve/CVE-2026-50219.html * https://www.suse.com/security/cve/CVE-2026-56131.html * https://www.suse.com/security/cve/CVE-2026-56132.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-56406.html * https://www.suse.com/security/cve/CVE-2026-56407.html * https://www.suse.com/security/cve/CVE-2026-56408.html * https://www.suse.com/security/cve/CVE-2026-56409.html * https://www.suse.com/security/cve/CVE-2026-56410.html * https://www.suse.com/security/cve/CVE-2026-56411.html * https://www.suse.com/security/cve/CVE-2026-56412.html * https://www.suse.com/security/cve/CVE-2026-66046.html * https://www.suse.com/security/cve/CVE-2026-72522.html * https://www.suse.com/security/cve/CVE-2026-76641.html * https://www.suse.com/security/cve/CVE-2026-76956.html * https://www.suse.com/security/cve/CVE-2026-76957.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1249584 * https://bugzilla.suse.com/show_bug.cgi?id=1257144 * https://bugzilla.suse.com/show_bug.cgi?id=1257496 * https://bugzilla.suse.com/show_bug.cgi?id=1259711 * https://bugzilla.suse.com/show_bug.cgi?id=1259726 * https://bugzilla.suse.com/show_bug.cgi?id=1259729 * https://bugzilla.suse.com/show_bug.cgi?id=1262263 * https://bugzilla.suse.com/show_bug.cgi?id=1264713 * https://bugzilla.suse.com/show_bug.cgi?id=1267631 * https://bugzilla.suse.com/show_bug.cgi?id=1268572 * https://bugzilla.suse.com/show_bug.cgi?id=1268573 * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1275594 * https://bugzilla.suse.com/show_bug.cgi?id=1275732 * https://bugzilla.suse.com/show_bug.cgi?id=1275859 * https://bugzilla.suse.com/show_bug.cgi?id=1275860 * https://bugzilla.suse.com/show_bug.cgi?id=1275915 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:36:59 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:36:59 -0000 Subject: SUSE-SU-2026:24320-1: important: Security update for rpcbind Message-ID: <179300381986.6825.12852528673060235359@3c67540d6a94> # Security update for rpcbind Announcement ID: SUSE-SU-2026:24320-1 Release Date: 2026-10-14T12:18:00Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-933 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * rpcbind-debuginfo-1.2.9-159998.1.1 * rpcbind-1.2.9-159998.1.1 * rpcbind-debugsource-1.2.9-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:37:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:37:20 -0000 Subject: SUSE-SU-2026:24318-1: important: Security update for docker Message-ID: <179300384070.6825.17375905699884672660@3c67540d6a94> # Security update for docker Announcement ID: SUSE-SU-2026:24318-1 Release Date: 2026-10-13T09:29:42Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266625 * bsc#1267827 * bsc#1278193 Cross-References: * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities and has three fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-930 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * docker-buildx-0.36.1-159998.1.1 * docker-29.7.2_ce-159998.1.1 * docker-debuginfo-29.7.2_ce-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:48:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:48:08 -0000 Subject: SUSE-SU-2026:24316-1: important: Security update for the Linux Kernel Message-ID: <179300448856.6825.5954775793428925978@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24316-1 Release Date: 2026-10-12T15:10:35Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 479 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-686 ## Package List: * SUSE Linux Micro 6.0 (noarch) * kernel-devel-rt-6.4.0-159998.53.1 * kernel-source-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-livepatch-6.4.0-159998.53.1 * kernel-rt-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 08:59:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 08:59:07 -0000 Subject: SUSE-SU-2026:24315-1: important: Security update for the Linux Kernel Message-ID: <179300514769.6825.12299596120333358386@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24315-1 Release Date: 2026-10-12T14:49:37Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266008 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269532 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1271955 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1274920 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275540 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276277 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-43502 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53090 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63795 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68162 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68445 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72084 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43502 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43502 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43502 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53090 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53090 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68162 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68162 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68445 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68445 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68445 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72084 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72084 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 479 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Security update for the Linux Kernel ### Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008). * CVE-2026-53090: bpf: Fix ld_{abs,ind} failure path analysis in subprogs (bsc#1269532). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1271955). * CVE-2026-68162: sctp: avoid auth_enable sysctl UAF during netns teardown (bsc#1274920). * CVE-2026-68445: drm/vc4: Prevent shader BO mappings from becoming writable (bsc#1276277). * CVE-2026-72084: scsi: target: Bound PR-OUT TransportID parsing to the received buffer (bsc#1275540). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-684 * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-686 ## Package List: * SUSE Linux Micro 6.0 (aarch64 nosrc s390x x86_64) * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-default-base-6.4.0-159998.53.1.159998.21.37 * kernel-kvmsmall-debuginfo-6.4.0-159998.53.1 * kernel-kvmsmall-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * kernel-default-debugsource-6.4.0-159998.53.1 * kernel-default-debuginfo-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (noarch) * kernel-devel-6.4.0-159998.53.1 * kernel-source-6.4.0-159998.53.1 * kernel-macros-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.53.1 * SUSE Linux Micro 6.0 (aarch64) * kernel-default-base-6.4.0-159998.53.1.159998.21.38 * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-rt-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-rt-debugsource-6.4.0-159998.53.1 * kernel-rt-devel-6.4.0-159998.53.1 * kernel-rt-devel-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-43502.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53090.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68162.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68445.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72084.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266008 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269532 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1271955 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1274920 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275540 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276277 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:10:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:10:35 -0000 Subject: SUSE-SU-2026:24314-1: important: Security update for the Linux Kernel Message-ID: <179300583566.6825.16294998142689623287@3c67540d6a94> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24314-1 Release Date: 2026-10-12T16:13:17Z Rating: important References: * bsc#1222538 * bsc#1254408 * bsc#1258298 * bsc#1260474 * bsc#1263017 * bsc#1263602 * bsc#1263865 * bsc#1264747 * bsc#1264807 * bsc#1266410 * bsc#1266735 * bsc#1266848 * bsc#1267373 * bsc#1267464 * bsc#1267564 * bsc#1267648 * bsc#1267985 * bsc#1269000 * bsc#1269685 * bsc#1269816 * bsc#1271817 * bsc#1271906 * bsc#1272145 * bsc#1272215 * bsc#1272426 * bsc#1272471 * bsc#1272473 * bsc#1272572 * bsc#1272793 * bsc#1272847 * bsc#1272890 * bsc#1273059 * bsc#1273251 * bsc#1273258 * bsc#1273309 * bsc#1273339 * bsc#1273420 * bsc#1273512 * bsc#1273522 * bsc#1273750 * bsc#1273759 * bsc#1273776 * bsc#1273782 * bsc#1273870 * bsc#1273879 * bsc#1273889 * bsc#1273899 * bsc#1273938 * bsc#1273953 * bsc#1273976 * bsc#1273999 * bsc#1274010 * bsc#1274036 * bsc#1274037 * bsc#1274245 * bsc#1274316 * bsc#1274319 * bsc#1274494 * bsc#1274637 * bsc#1274730 * bsc#1274776 * bsc#1274803 * bsc#1274836 * bsc#1274838 * bsc#1274890 * bsc#1275092 * bsc#1275094 * bsc#1275129 * bsc#1275156 * bsc#1275455 * bsc#1275495 * bsc#1275542 * bsc#1275543 * bsc#1275545 * bsc#1275549 * bsc#1275559 * bsc#1275567 * bsc#1275588 * bsc#1275681 * bsc#1275684 * bsc#1275685 * bsc#1275690 * bsc#1275694 * bsc#1275799 * bsc#1275802 * bsc#1275866 * bsc#1275924 * bsc#1275953 * bsc#1275972 * bsc#1275977 * bsc#1275985 * bsc#1276006 * bsc#1276007 * bsc#1276009 * bsc#1276287 * bsc#1276295 * bsc#1276337 * bsc#1276338 * bsc#1276339 * bsc#1276340 * bsc#1276341 * bsc#1276349 * bsc#1276352 * bsc#1276353 * bsc#1276354 * bsc#1276381 * bsc#1276388 * bsc#1276395 * bsc#1276445 * bsc#1276460 * bsc#1276461 * bsc#1276462 * bsc#1276468 * bsc#1276473 * bsc#1276474 * bsc#1276475 * bsc#1276504 * bsc#1276508 * bsc#1276512 * bsc#1276519 * bsc#1276528 * bsc#1276532 * bsc#1276535 * bsc#1276538 * bsc#1276547 * bsc#1276553 * bsc#1276563 * bsc#1276565 * bsc#1276570 * bsc#1276572 * bsc#1276573 * bsc#1276579 * bsc#1276766 * bsc#1276767 * bsc#1276783 * bsc#1276793 * bsc#1276801 * bsc#1276803 * bsc#1276814 * bsc#1276818 * bsc#1276821 * bsc#1276840 * bsc#1276865 * bsc#1276866 * bsc#1276876 * bsc#1276880 * bsc#1276891 * bsc#1276905 * bsc#1276921 * bsc#1276922 * bsc#1276923 * bsc#1276930 * bsc#1277023 * bsc#1277030 * bsc#1277032 * bsc#1277036 * bsc#1277070 * bsc#1277078 * bsc#1277092 * bsc#1277098 * bsc#1277108 * bsc#1277109 * bsc#1277114 * bsc#1277115 * bsc#1277120 * bsc#1277122 * bsc#1277128 * bsc#1277129 * bsc#1277143 * bsc#1277148 * bsc#1277149 * bsc#1277179 * bsc#1277215 * bsc#1277217 * bsc#1277218 * bsc#1277229 * bsc#1277231 * bsc#1277233 * bsc#1277235 * bsc#1277245 * bsc#1277249 * bsc#1277254 * bsc#1277268 * bsc#1277272 * bsc#1277296 * bsc#1277308 * bsc#1277314 * bsc#1277321 * bsc#1277328 * bsc#1277335 * bsc#1277342 * bsc#1277349 * bsc#1277350 * bsc#1277371 * bsc#1277372 * bsc#1277374 * bsc#1277392 * bsc#1277396 * bsc#1277401 * bsc#1277405 * bsc#1277410 * bsc#1277452 * bsc#1277489 * bsc#1277493 * bsc#1277505 * bsc#1277513 * bsc#1277544 * bsc#1277553 * bsc#1277555 * bsc#1277556 * bsc#1277557 * bsc#1277558 * bsc#1277561 * bsc#1277571 * bsc#1277574 * bsc#1277590 * bsc#1277615 * bsc#1277626 * bsc#1277640 * bsc#1277649 * bsc#1277655 * bsc#1277656 * bsc#1277662 * bsc#1277674 * bsc#1277705 * bsc#1277728 * bsc#1277738 * bsc#1277748 * bsc#1277761 * bsc#1277764 * bsc#1277766 * bsc#1277781 * bsc#1277783 * bsc#1277784 * bsc#1277792 * bsc#1277796 * bsc#1277801 * bsc#1277805 * bsc#1277813 * bsc#1277818 * bsc#1277820 * bsc#1277822 * bsc#1277823 * bsc#1277837 * bsc#1277840 * bsc#1277843 * bsc#1277857 * bsc#1277860 * bsc#1277862 * bsc#1277874 * bsc#1277876 * bsc#1277885 * bsc#1277892 * bsc#1277896 * bsc#1277897 * bsc#1277898 * bsc#1277900 * bsc#1277901 * bsc#1277904 * bsc#1277906 * bsc#1277908 * bsc#1277910 * bsc#1277915 * bsc#1277918 * bsc#1278031 * bsc#1278035 * bsc#1278053 * bsc#1278054 * bsc#1278056 * bsc#1278063 * bsc#1278067 * bsc#1278070 * bsc#1278087 * bsc#1278088 * bsc#1278091 * bsc#1278094 * bsc#1278098 * bsc#1278100 * bsc#1278108 * bsc#1278113 * bsc#1278132 * bsc#1278155 * bsc#1278178 * bsc#1278180 * bsc#1278191 * bsc#1278195 * bsc#1278199 * bsc#1278205 * bsc#1278210 * bsc#1278211 * bsc#1278216 * bsc#1278225 * bsc#1278233 * bsc#1278236 * bsc#1278240 * bsc#1278245 * bsc#1278247 * bsc#1278253 * bsc#1278255 * bsc#1278293 * bsc#1278294 * bsc#1278311 * bsc#1278314 * bsc#1278315 * bsc#1278324 * bsc#1278331 * bsc#1278335 * bsc#1278395 * bsc#1278416 * bsc#1278708 * bsc#1278716 * bsc#1278733 * bsc#1279422 * bsc#1279487 * bsc#1279497 * bsc#1279525 * bsc#1279527 * bsc#1279532 * bsc#1279535 * bsc#1279536 * bsc#1279580 * bsc#1279581 * bsc#1279619 * bsc#1279621 * bsc#1279786 * bsc#1279799 * bsc#1279811 * bsc#1279813 * bsc#1279819 * bsc#1279835 * bsc#1279847 * bsc#1279850 * bsc#1279875 * bsc#1279878 * bsc#1279888 * bsc#1280139 * bsc#1280143 * bsc#1280146 * bsc#1280148 * bsc#1280151 * bsc#1280178 * bsc#1280184 * bsc#1280206 * bsc#1280235 * bsc#1280237 * bsc#1280243 * bsc#1280252 * bsc#1280263 * bsc#1280296 * bsc#1280298 * bsc#1280338 * bsc#1280350 * bsc#1280375 * bsc#1280379 * bsc#1280383 * bsc#1280387 * bsc#1280388 * bsc#1280449 * bsc#1280451 * bsc#1280455 * bsc#1280456 * bsc#1280468 * bsc#1280487 * bsc#1280490 * bsc#1280496 * bsc#1280508 * bsc#1280509 * bsc#1280518 * bsc#1280544 * bsc#1280546 * bsc#1280548 * bsc#1280551 * bsc#1280577 * bsc#1280711 * bsc#1280716 * bsc#1280717 * bsc#1280719 * bsc#1280726 * bsc#1280727 * bsc#1280733 * bsc#1280750 * bsc#1280758 * bsc#1280786 * bsc#1280797 * bsc#1280870 * bsc#1280872 * bsc#1280923 * bsc#1280985 * bsc#1280993 * bsc#1281010 * bsc#1281042 * bsc#1281046 * bsc#1281054 * bsc#1281057 * bsc#1281077 * bsc#1281085 * bsc#1281201 * bsc#1281202 * bsc#1281224 * bsc#1281226 * bsc#1281229 * bsc#1281231 * bsc#1281273 * bsc#1281295 * bsc#1281358 * bsc#1281359 * bsc#1281379 * bsc#1281383 * bsc#1281387 * bsc#1281397 * bsc#1281399 * bsc#1281408 * bsc#1281427 * bsc#1281496 * bsc#1281514 * bsc#1281546 * bsc#1281599 * bsc#1281644 * bsc#1281680 * bsc#1281694 * bsc#1281717 * bsc#1281732 * bsc#1281738 * bsc#1281777 * bsc#1281778 * bsc#1281786 * bsc#1281789 * bsc#1281793 * bsc#1281795 * bsc#1281808 * bsc#1281818 * bsc#1281825 * bsc#1281922 * bsc#1281927 * bsc#1281955 * bsc#1281964 * bsc#1281973 * bsc#1281988 * bsc#1281993 * bsc#1281995 * bsc#1281997 * bsc#1282020 * bsc#1282034 * bsc#1282040 * bsc#1282041 * bsc#1282042 * bsc#1282050 * bsc#1282054 * bsc#1282072 * bsc#1282104 * bsc#1282110 * bsc#1282113 * bsc#1282143 * bsc#1282170 * bsc#1282193 * bsc#1282197 * bsc#1282270 * bsc#1282271 * bsc#1282284 * bsc#1282286 * bsc#1282288 * bsc#1282383 * bsc#1282648 * bsc#1282672 * bsc#1282767 * bsc#1282774 * bsc#1282803 * bsc#1282810 * bsc#1282812 * bsc#1282823 * bsc#1282881 * bsc#1282891 * bsc#1282906 * bsc#1282997 * bsc#1283121 * bsc#1283154 * bsc#1283163 * bsc#1283176 * bsc#1283201 * bsc#1283213 * bsc#1283230 * bsc#1283312 * bsc#1283500 * bsc#1283805 * bsc#1283935 * bsc#1283973 * bsc#1284146 * jsc#PED-16401 * jsc#PED-16892 * jsc#PED-16993 Cross-References: * CVE-2024-26730 * CVE-2025-38704 * CVE-2026-100075 * CVE-2026-23128 * CVE-2026-23352 * CVE-2026-31523 * CVE-2026-31689 * CVE-2026-43409 * CVE-2026-43448 * CVE-2026-45836 * CVE-2026-45872 * CVE-2026-46044 * CVE-2026-46135 * CVE-2026-46149 * CVE-2026-46196 * CVE-2026-46304 * CVE-2026-52912 * CVE-2026-53061 * CVE-2026-53284 * CVE-2026-53384 * CVE-2026-53400 * CVE-2026-63883 * CVE-2026-63890 * CVE-2026-63913 * CVE-2026-63956 * CVE-2026-63963 * CVE-2026-63993 * CVE-2026-64003 * CVE-2026-64009 * CVE-2026-64038 * CVE-2026-64046 * CVE-2026-64103 * CVE-2026-64173 * CVE-2026-64205 * CVE-2026-64210 * CVE-2026-64213 * CVE-2026-64279 * CVE-2026-64283 * CVE-2026-64297 * CVE-2026-64299 * CVE-2026-64319 * CVE-2026-64320 * CVE-2026-64372 * CVE-2026-64373 * CVE-2026-64402 * CVE-2026-64405 * CVE-2026-64425 * CVE-2026-64474 * CVE-2026-64475 * CVE-2026-64476 * CVE-2026-64507 * CVE-2026-64528 * CVE-2026-64542 * CVE-2026-64556 * CVE-2026-64570 * CVE-2026-64579 * CVE-2026-64580 * CVE-2026-64589 * CVE-2026-68096 * CVE-2026-68141 * CVE-2026-68146 * CVE-2026-68148 * CVE-2026-68198 * CVE-2026-68253 * CVE-2026-68258 * CVE-2026-68273 * CVE-2026-68290 * CVE-2026-68294 * CVE-2026-68338 * CVE-2026-68376 * CVE-2026-68441 * CVE-2026-68448 * CVE-2026-68451 * CVE-2026-68452 * CVE-2026-68454 * CVE-2026-68471 * CVE-2026-68477 * CVE-2026-72012 * CVE-2026-72017 * CVE-2026-72019 * CVE-2026-72023 * CVE-2026-72025 * CVE-2026-72045 * CVE-2026-72051 * CVE-2026-72052 * CVE-2026-72053 * CVE-2026-72054 * CVE-2026-72055 * CVE-2026-72061 * CVE-2026-72063 * CVE-2026-72066 * CVE-2026-72085 * CVE-2026-72086 * CVE-2026-72098 * CVE-2026-72102 * CVE-2026-72106 * CVE-2026-72107 * CVE-2026-72108 * CVE-2026-72129 * CVE-2026-72130 * CVE-2026-72135 * CVE-2026-72136 * CVE-2026-72138 * CVE-2026-72157 * CVE-2026-72161 * CVE-2026-72163 * CVE-2026-72164 * CVE-2026-72166 * CVE-2026-72218 * CVE-2026-72219 * CVE-2026-72224 * CVE-2026-72237 * CVE-2026-72242 * CVE-2026-72243 * CVE-2026-72247 * CVE-2026-72256 * CVE-2026-72282 * CVE-2026-72297 * CVE-2026-72299 * CVE-2026-72306 * CVE-2026-72321 * CVE-2026-72322 * CVE-2026-72323 * CVE-2026-72325 * CVE-2026-72330 * CVE-2026-72339 * CVE-2026-72347 * CVE-2026-72348 * CVE-2026-72349 * CVE-2026-72350 * CVE-2026-72351 * CVE-2026-72352 * CVE-2026-72379 * CVE-2026-72383 * CVE-2026-72392 * CVE-2026-72398 * CVE-2026-72399 * CVE-2026-72404 * CVE-2026-72406 * CVE-2026-72413 * CVE-2026-72421 * CVE-2026-72425 * CVE-2026-72433 * CVE-2026-72434 * CVE-2026-72435 * CVE-2026-72436 * CVE-2026-72437 * CVE-2026-72438 * CVE-2026-72439 * CVE-2026-72440 * CVE-2026-72444 * CVE-2026-72447 * CVE-2026-72448 * CVE-2026-72449 * CVE-2026-72450 * CVE-2026-72459 * CVE-2026-72460 * CVE-2026-72487 * CVE-2026-72488 * CVE-2026-74255 * CVE-2026-74256 * CVE-2026-74257 * CVE-2026-74258 * CVE-2026-74261 * CVE-2026-74267 * CVE-2026-74268 * CVE-2026-74270 * CVE-2026-74278 * CVE-2026-74281 * CVE-2026-74282 * CVE-2026-74283 * CVE-2026-74284 * CVE-2026-74288 * CVE-2026-74289 * CVE-2026-74290 * CVE-2026-74302 * CVE-2026-74307 * CVE-2026-74308 * CVE-2026-74310 * CVE-2026-74313 * CVE-2026-74317 * CVE-2026-74330 * CVE-2026-74346 * CVE-2026-74349 * CVE-2026-74356 * CVE-2026-74359 * CVE-2026-74363 * CVE-2026-74365 * CVE-2026-74375 * CVE-2026-74376 * CVE-2026-74377 * CVE-2026-74378 * CVE-2026-74382 * CVE-2026-74384 * CVE-2026-74385 * CVE-2026-74386 * CVE-2026-74388 * CVE-2026-74389 * CVE-2026-74390 * CVE-2026-74391 * CVE-2026-74397 * CVE-2026-74398 * CVE-2026-74406 * CVE-2026-74443 * CVE-2026-74444 * CVE-2026-74450 * CVE-2026-74453 * CVE-2026-74464 * CVE-2026-74465 * CVE-2026-74467 * CVE-2026-74469 * CVE-2026-74471 * CVE-2026-74473 * CVE-2026-74475 * CVE-2026-74476 * CVE-2026-74479 * CVE-2026-74480 * CVE-2026-74485 * CVE-2026-74487 * CVE-2026-74490 * CVE-2026-74492 * CVE-2026-74493 * CVE-2026-74515 * CVE-2026-74523 * CVE-2026-74536 * CVE-2026-74540 * CVE-2026-74541 * CVE-2026-74553 * CVE-2026-74555 * CVE-2026-74557 * CVE-2026-74564 * CVE-2026-74579 * CVE-2026-74580 * CVE-2026-74586 * CVE-2026-74588 * CVE-2026-74589 * CVE-2026-74592 * CVE-2026-74594 * CVE-2026-74595 * CVE-2026-74597 * CVE-2026-74598 * CVE-2026-74600 * CVE-2026-74601 * CVE-2026-74603 * CVE-2026-74608 * CVE-2026-74609 * CVE-2026-74612 * CVE-2026-74615 * CVE-2026-74616 * CVE-2026-74622 * CVE-2026-74625 * CVE-2026-74630 * CVE-2026-74631 * CVE-2026-74632 * CVE-2026-74636 * CVE-2026-74637 * CVE-2026-74638 * CVE-2026-74659 * CVE-2026-74660 * CVE-2026-74663 * CVE-2026-74666 * CVE-2026-74667 * CVE-2026-74671 * CVE-2026-74688 * CVE-2026-74689 * CVE-2026-74696 * CVE-2026-74697 * CVE-2026-74700 * CVE-2026-74701 * CVE-2026-74705 * CVE-2026-74710 * CVE-2026-74713 * CVE-2026-74718 * CVE-2026-74719 * CVE-2026-74725 * CVE-2026-74726 * CVE-2026-74735 * CVE-2026-74737 * CVE-2026-74739 * CVE-2026-74743 * CVE-2026-74744 * CVE-2026-74752 * CVE-2026-80540 * CVE-2026-80557 * CVE-2026-80580 * CVE-2026-80585 * CVE-2026-80586 * CVE-2026-80589 * CVE-2026-80603 * CVE-2026-80613 * CVE-2026-80629 * CVE-2026-80631 * CVE-2026-80646 * CVE-2026-80647 * CVE-2026-80663 * CVE-2026-80664 * CVE-2026-80667 * CVE-2026-80679 * CVE-2026-80681 * CVE-2026-80686 * CVE-2026-80693 * CVE-2026-80714 * CVE-2026-80715 * CVE-2026-80716 * CVE-2026-80722 * CVE-2026-80725 * CVE-2026-80731 * CVE-2026-80737 * CVE-2026-80739 * CVE-2026-80747 * CVE-2026-80756 * CVE-2026-80785 * CVE-2026-80789 * CVE-2026-80793 * CVE-2026-80799 * CVE-2026-80805 * CVE-2026-80836 * CVE-2026-80840 * CVE-2026-80841 * CVE-2026-80842 * CVE-2026-80844 * CVE-2026-80846 * CVE-2026-80847 * CVE-2026-80848 * CVE-2026-80852 * CVE-2026-80863 * CVE-2026-80864 * CVE-2026-80865 * CVE-2026-80880 * CVE-2026-80909 * CVE-2026-80932 * CVE-2026-80976 * CVE-2026-80983 * CVE-2026-81000 * CVE-2026-81001 * CVE-2026-89448 * CVE-2026-89451 * CVE-2026-89477 * CVE-2026-89479 * CVE-2026-89480 * CVE-2026-89481 * CVE-2026-89482 * CVE-2026-89485 * CVE-2026-89508 * CVE-2026-89510 * CVE-2026-89511 * CVE-2026-89525 * CVE-2026-89531 * CVE-2026-89532 * CVE-2026-89533 * CVE-2026-89536 * CVE-2026-89538 * CVE-2026-89539 * CVE-2026-89540 * CVE-2026-89541 * CVE-2026-89542 * CVE-2026-89544 * CVE-2026-89547 * CVE-2026-89548 * CVE-2026-89550 * CVE-2026-89551 * CVE-2026-89564 * CVE-2026-89569 * CVE-2026-89580 * CVE-2026-89603 * CVE-2026-89609 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89638 * CVE-2026-89644 * CVE-2026-89662 * CVE-2026-89663 * CVE-2026-89665 * CVE-2026-89671 * CVE-2026-89672 * CVE-2026-89673 * CVE-2026-89674 * CVE-2026-89680 * CVE-2026-89684 * CVE-2026-89686 * CVE-2026-89694 * CVE-2026-89696 * CVE-2026-89697 * CVE-2026-89699 * CVE-2026-89702 * CVE-2026-89704 * CVE-2026-89707 * CVE-2026-89710 * CVE-2026-89712 * CVE-2026-89713 * CVE-2026-89784 * CVE-2026-89789 * CVE-2026-89899 * CVE-2026-89912 * CVE-2026-89913 * CVE-2026-89929 * CVE-2026-89930 * CVE-2026-89931 * CVE-2026-89968 * CVE-2026-89970 * CVE-2026-89984 * CVE-2026-90003 * CVE-2026-90074 * CVE-2026-90088 * CVE-2026-90097 * CVE-2026-90104 * CVE-2026-90149 * CVE-2026-90151 * CVE-2026-90182 * CVE-2026-90183 * CVE-2026-90198 * CVE-2026-90203 * CVE-2026-90218 * CVE-2026-90228 * CVE-2026-90255 * CVE-2026-90259 * CVE-2026-90263 * CVE-2026-90265 * CVE-2026-90292 * CVE-2026-90293 * CVE-2026-90294 * CVE-2026-90307 * CVE-2026-90308 * CVE-2026-90309 * CVE-2026-90358 * CVE-2026-90388 * CVE-2026-90413 * CVE-2026-90414 * CVE-2026-90415 * CVE-2026-90417 * CVE-2026-90434 * CVE-2026-92495 * CVE-2026-92500 * CVE-2026-92503 * CVE-2026-92507 * CVE-2026-92508 * CVE-2026-92509 * CVE-2026-92510 * CVE-2026-92511 * CVE-2026-92512 * CVE-2026-92514 * CVE-2026-92523 * CVE-2026-92525 * CVE-2026-93037 * CVE-2026-93102 * CVE-2026-93103 * CVE-2026-93104 * CVE-2026-93107 * CVE-2026-93108 * CVE-2026-93109 * CVE-2026-93110 * CVE-2026-93154 * CVE-2026-93207 * CVE-2026-93212 * CVE-2026-93264 * CVE-2026-93269 * CVE-2026-93782 * CVE-2026-93794 * CVE-2026-93810 * CVE-2026-93813 * CVE-2026-93826 * CVE-2026-93829 * CVE-2026-97421 * CVE-2026-97477 * CVE-2026-97505 * CVE-2026-97557 * CVE-2026-97934 * CVE-2026-97940 * CVE-2026-97950 * CVE-2026-98003 * CVE-2026-98080 * CVE-2026-98091 * CVE-2026-98164 CVSS scores: * CVE-2024-26730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26730 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26730 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2025-38704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-38704 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( SUSE ): 7.7 CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-100075 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-100075 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23128 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23128 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23128 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23352 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31523 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31523 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31689 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43409 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43448 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-45836 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45836 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45872 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45872 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-45872 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46044 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46135 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-46135 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-46135 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46149 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46149 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-46196 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46196 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46304 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46304 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-52912 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-52912 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-52912 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53061 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-53061 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53284 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-53284 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53284 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-53400 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-53400 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63883 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-63883 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-63883 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63890 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63890 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63913 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63913 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-63956 ( SUSE ): 7.0 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63956 ( SUSE ): 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63963 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63963 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63993 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63993 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64003 ( SUSE ): 4.1 CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64003 ( SUSE ): 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64003 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64009 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-64009 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64038 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64038 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64038 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64046 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64046 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64103 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64103 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64103 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64173 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64173 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64173 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64205 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64205 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64210 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64213 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64213 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64279 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64279 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64283 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64297 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64297 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64297 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64299 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64319 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64319 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64319 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64320 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64320 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-64320 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64372 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64372 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64373 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64373 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64373 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64402 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64405 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64405 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64405 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64425 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64474 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64474 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64475 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64475 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64476 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64507 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64528 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64528 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64542 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64542 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64556 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64556 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64570 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64570 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64589 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64589 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68096 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68096 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68141 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68141 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68146 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-68146 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-68148 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68148 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68148 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68198 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68198 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68253 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68258 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-68258 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-68258 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-68273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68273 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68290 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68290 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68294 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68294 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68338 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68338 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68376 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68376 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68441 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68448 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68451 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68451 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68451 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-68452 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68452 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68454 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H * CVE-2026-68454 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H * CVE-2026-68454 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-68471 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68471 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68471 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68477 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68477 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68477 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72012 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72012 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72017 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72017 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72019 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72019 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72019 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-72023 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72023 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72025 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72025 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72045 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72045 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-72045 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72051 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72051 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72051 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72052 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72052 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72052 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72053 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72053 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72053 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72054 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72055 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72055 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72055 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-72061 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72061 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72066 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72066 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72085 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72085 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72085 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72086 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72098 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72098 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72098 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72102 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72102 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72102 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72106 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72106 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72107 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72107 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72108 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-72108 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-72108 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72129 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72129 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72130 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72130 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72135 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72135 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72136 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72136 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72136 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-72138 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72138 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72157 ( SUSE ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72157 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72161 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72161 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72163 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72163 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72164 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72164 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72218 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72218 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72219 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72219 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72224 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72224 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72237 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72242 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72242 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72243 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N * CVE-2026-72243 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72247 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72247 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72256 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72282 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72282 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72297 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-72297 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72299 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72306 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72321 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72321 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72322 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72322 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72322 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-72323 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72325 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72330 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72330 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72339 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72339 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72339 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72347 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72347 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72348 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72348 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-72349 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72350 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72350 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72350 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72351 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72351 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72352 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72352 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72379 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-72379 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-72383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72383 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72392 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72392 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72398 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72399 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72399 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72404 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72404 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72406 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72406 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72413 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72413 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72421 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72421 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-72425 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72425 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72425 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-72433 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72434 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72434 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72435 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-72435 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72436 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72436 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72437 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72437 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72438 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72438 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72438 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72439 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-72439 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-72440 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72440 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72440 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72444 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-72444 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72447 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72447 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72448 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72448 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72449 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72449 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72449 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72450 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72450 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72459 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72459 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72460 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72460 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72487 ( NVD ): 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-72488 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72488 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74255 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74255 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74256 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74257 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74257 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74258 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74258 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74261 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74267 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74267 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74268 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74268 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74270 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74270 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74278 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74278 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-74281 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74281 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74282 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74283 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74283 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74288 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74289 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74290 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74302 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74307 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74308 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74310 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74313 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74313 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74317 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74317 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74330 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74346 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74346 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74349 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74349 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74349 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74356 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74356 ( NVD ): 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74359 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74363 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74365 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L * CVE-2026-74375 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74375 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74376 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74376 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74377 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74377 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74377 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74378 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74378 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74382 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74382 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74384 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74384 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74385 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74385 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74385 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74386 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74386 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74388 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74388 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74389 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74390 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74390 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74391 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74397 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74397 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74398 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74406 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74406 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74443 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74443 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74444 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74450 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74450 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:L * CVE-2026-74450 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74453 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74464 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74464 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74465 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74467 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74467 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74469 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74469 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74471 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74471 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74473 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74473 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74475 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74475 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L * CVE-2026-74476 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74476 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74479 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74479 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74480 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74480 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74485 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74485 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74485 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74487 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74490 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74490 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74492 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74493 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74515 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74515 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74523 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74523 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74536 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74540 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74540 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74541 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74553 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74555 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74557 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-74557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74564 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-74564 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74579 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74579 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-74580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74580 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74586 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74588 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74588 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74589 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74589 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74592 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-74592 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-74592 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74594 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74594 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74595 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74597 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74597 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74598 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74598 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-74600 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74600 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74601 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74601 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74601 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74603 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74603 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-74603 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74608 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74608 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74609 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74612 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74612 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74615 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74615 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74615 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74616 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74616 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74616 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74622 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74625 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74625 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74630 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74630 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74631 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74632 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74632 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74636 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74637 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74638 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74659 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74660 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74663 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74663 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74666 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74666 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74667 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74671 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74688 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74688 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74688 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74689 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-74689 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-74689 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-74696 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74697 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-74700 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74700 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74700 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74701 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74701 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74705 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74705 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74710 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74713 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74713 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-74718 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74719 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74726 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74726 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-74735 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74735 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74737 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74737 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74737 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74739 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74739 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-74739 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74743 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74743 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74744 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74744 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74752 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74752 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80540 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80557 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80557 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80557 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80580 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80585 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80585 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80586 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-80586 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80589 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80603 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80603 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-80603 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-80613 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80613 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80629 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80629 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80631 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80631 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80631 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80646 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80646 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80647 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80647 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80664 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80664 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80664 ( NVD ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-80667 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80679 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80679 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80681 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80693 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80693 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-80714 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80714 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80714 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80715 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80715 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80716 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80716 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80716 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80722 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80722 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80722 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80725 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80725 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80731 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80731 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80737 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80737 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80747 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80747 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80747 ( NVD ): 8.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-80756 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-80756 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-80785 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80785 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80789 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80789 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80793 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80793 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80799 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80799 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-80805 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80805 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80836 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80836 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-80840 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80840 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80841 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80841 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80842 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80844 ( SUSE ): 8.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:N/SA:N * CVE-2026-80844 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80846 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80847 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80847 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80848 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80852 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80863 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80864 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80865 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80880 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80909 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80909 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80932 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80932 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80932 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80976 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80976 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80976 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80983 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80983 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81000 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81000 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81000 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81001 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89448 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89448 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89451 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89477 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89479 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89479 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89479 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89480 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89480 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89480 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89481 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-89481 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-89481 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-89482 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89482 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89482 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89485 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89485 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89485 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89508 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89508 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89510 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89510 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89511 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89511 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89511 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89525 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89525 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89531 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89531 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89532 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89532 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89532 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89533 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89533 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-89533 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89536 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89536 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89536 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89538 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89538 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89538 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89539 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-89539 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-89540 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89540 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89540 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89541 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-89541 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89544 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89544 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89544 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89547 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89547 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89548 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89550 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89550 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89550 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89551 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89551 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89551 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89564 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89564 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89564 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( SUSE ): 7.5 CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89569 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89569 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89580 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89580 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89603 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89603 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-89609 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89609 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89609 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89638 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89638 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89644 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89644 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89662 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89663 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89663 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89665 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-89665 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89665 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-89671 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89671 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89672 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89672 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-89673 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89674 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89674 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89680 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89680 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89684 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89686 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89696 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89697 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89697 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89699 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89699 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89699 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89702 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89702 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89704 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89704 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89707 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89710 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89712 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89713 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89713 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89784 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89784 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89789 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-89789 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89789 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89899 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89912 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89912 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H * CVE-2026-89913 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-89913 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89929 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89929 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-89929 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89930 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-89930 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-89930 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89931 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-89931 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89968 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89968 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89970 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89970 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89984 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90003 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90003 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90074 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90097 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90104 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-90104 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90104 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90149 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90149 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90151 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90151 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90182 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90183 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-90183 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90198 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-90198 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90203 ( SUSE ): 5.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90203 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90203 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-90218 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90218 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90228 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90255 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90255 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90259 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-90259 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90263 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-90263 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-90265 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90265 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90292 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90292 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90293 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90293 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90294 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90307 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-90307 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-90308 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90308 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90309 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90358 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-90358 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90388 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90388 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90388 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90413 ( SUSE ): 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-90413 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90413 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90414 ( SUSE ): 7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-90414 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90415 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90417 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90434 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92495 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-92500 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92500 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92503 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92503 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92507 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-92507 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92508 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92508 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92509 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92510 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92511 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92512 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92514 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-92523 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92523 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-92525 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-92525 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93037 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93037 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93102 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93103 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-93103 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93104 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93104 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93107 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93107 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-93108 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93109 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93110 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93154 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-93154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93207 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93207 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93212 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93212 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93264 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93264 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-93269 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93782 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93782 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93782 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-93794 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-93810 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93810 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93813 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93813 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-93813 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93826 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93826 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93829 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93829 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97421 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97421 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-97421 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97477 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97505 ( SUSE ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-97505 ( SUSE ): 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97557 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97557 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97557 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97934 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97934 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97940 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98080 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98091 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98164 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98164 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98164 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 473 vulnerabilities, contains three features and has 14 fixes can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-26730: hwmon: (nct6775) Fix access to temperature configuration registers (bsc#1222538). * CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer (bsc#1254408). * CVE-2026-23128: arm64: Set __nocfi on swsusp_arch_resume() (bsc#1258298). * CVE-2026-23352: x86/efi: defer freeing of boot services memory (bsc#1260474). * CVE-2026-31523: nvme-pci: ensure we're polling a polled queue (bsc#1263017). * CVE-2026-31689: EDAC/mc: Fix error path ordering in edac_mc_alloc() (bsc#1263602). * CVE-2026-43409: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). * CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). * CVE-2026-45836: Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() (bsc#1266410). * CVE-2026-45872: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). * CVE-2026-46044: ipmi:ssif: Clean up kthread on errors (bsc#1267464). * CVE-2026-46135: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec (bsc#1267373). * CVE-2026-46149: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (bsc#1267648). * CVE-2026-46196: tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() (bsc#1266848). * CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985). * CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000). * CVE-2026-53061: dm cache: fix dirty mapping checking in passthrough mode switching (bsc#1269685). * CVE-2026-53284: btrfs: only release the dirty pages io tree after successful writes (bsc#1269816). * CVE-2026-53384: serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails (bsc#1271817). * CVE-2026-53400: i2c: core: fix adapter registration race (bsc#1271906). * CVE-2026-63883: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). * CVE-2026-63890: scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker (bsc#1272426). * CVE-2026-63913: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (bsc#1272890). * CVE-2026-63956: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). * CVE-2026-63963: usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers (bsc#1272471). * CVE-2026-63993: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (bsc#1279847). * CVE-2026-64003: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). * CVE-2026-64009: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). * CVE-2026-64038: hwmon: (lm90) Stop work before releasing hwmon device (bsc#1273750). * CVE-2026-64046: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). * CVE-2026-64103: scsi: isci: Fix use-after-free in device removal path (bsc#1273759). * CVE-2026-64173: tracing: Do not call map->ops->elt_free() if elt_alloc() fails (bsc#1272145). * CVE-2026-64205: i2c: i801: fix hardware state machine corruption in error path (bsc#1272215). * CVE-2026-64210: net/mlx5e: xsk: Fix unlocked writing to ICOSQ (bsc#1273899). * CVE-2026-64213: hwmon: (lm90) Add lock protection to lm90_alert (bsc#1272793). * CVE-2026-64279: i2c: core: fix adapter deregistration race (bsc#1273953). * CVE-2026-64283: KVM: guest_memfd: Treat memslot binding offset+size as unsigned values (bsc#1273870). * CVE-2026-64297: module: decompress: check return value of module_extend_max_pages() (bsc#1273938). * CVE-2026-64299: tracing: Prevent out-of-bounds read in glob matching (bsc#1273976). * CVE-2026-64319: nvmet-auth: validate reply message payload bounds against transfer length (bsc#1273339). * CVE-2026-64320: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page (bsc#1273420). * CVE-2026-64372: cpufreq: pcc: fix use-after-free and double free in _OSC evaluation (bsc#1273889). * CVE-2026-64373: cpufreq: Fix hotplug-suspend race during reboot (bsc#1273776). * CVE-2026-64402: coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() (bsc#1273258). * CVE-2026-64405: Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() (bsc#1273512). * CVE-2026-64425: io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item (bsc#1273522). * CVE-2026-64474: vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc (bsc#1274316). * CVE-2026-64475: vfio/pci: Release the VGA arbiter client on register_device() failure (bsc#1274319). * CVE-2026-64476: vfio/pci: Latch disable_idle_d3 per device (bsc#1274245). * CVE-2026-64507: bpf: Support for hardening against JIT spraying (bsc#1273999). * CVE-2026-64528: tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (bsc#1272847). * CVE-2026-64542: ipv6: ndisc: fix NULL deref in accept_untracked_na() (bsc#1273309). * CVE-2026-64556: perf/core: Detach event groups during remove_on_exec (bsc#1273251). * CVE-2026-64570: wifi: mac80211: fix fils_discovery double free on alloc failure (bsc#1274010). * CVE-2026-64579: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert (bsc#1274036). * CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). * CVE-2026-64589: i2c: core: fix hang on adapter registration failure (bsc#1274494). * CVE-2026-68096: audit: fix recursive locking deadlock in audit_dupe_exe() (bsc#1274730). * CVE-2026-68141: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() (bsc#1275094). * CVE-2026-68146: ftrace: Add global mutex to serialize trace_parser access (bsc#1274890). * CVE-2026-68148: fscrypt: Add missing superblock check in find_or_insert_direct_key() (bsc#1275588). * CVE-2026-68198: wifi: ath6kl: fix use-after-free in aggr_reset_state() (bsc#1274803). * CVE-2026-68253: drm/i915/hdcp: check streams[] bounds before overflow (bsc#1275156). * CVE-2026-68258: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size (bsc#1275866). * CVE-2026-68273: drm/amdgpu: Fix context pstate override handling (bsc#1275129). * CVE-2026-68290: rds: tcp: unregister sysctl before tearing down listen socket (bsc#1275977). * CVE-2026-68294: net: qrtr: restrict socket creation to the initial network namespace (bsc#1275092). * CVE-2026-68338: net/packet: avoid fanout hook re-registration after unregister (bsc#1274637). * CVE-2026-68376: sctp: fix auth_hmacs array size in struct sctp_cookie (bsc#1274836). * CVE-2026-68441: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains (bsc#1274776). * CVE-2026-68448: ovl: check access to copy_file_range source with src mounter creds (bsc#1274838). * CVE-2026-68451: s390/zcrypt: Validate length for CCA ECC private key requests (bsc#1276287). * CVE-2026-68452: s390/zcrypt: Validate length for CCA AES cipher key requests (bsc#1276295). * CVE-2026-68454: KVM: s390: pci: Fix handling of AIF enable without AISB (bsc#1276388). * CVE-2026-68471: wifi: ieee80211: validate MLE common info length (bsc#1276504). * CVE-2026-68477: ipvs: fix more places with wrong ipv6 transport offsets (bsc#1275495). * CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering (bsc#1276783). * CVE-2026-72017: net: macb: drop in-flight Tx SKBs on close (bsc#1276840). * CVE-2026-72019: macsec: don't read an unset MAC header in macsec_encrypt() (bsc#1276865). * CVE-2026-72023: octeontx2-pf: fix SQB pointer leak on init failure (bsc#1276793). * CVE-2026-72025: s390/monwriter: Reject buffer reuse with different data length (bsc#1276923). * CVE-2026-72045: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF (bsc#1277078). * CVE-2026-72051: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276801). * CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276803). * CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276814). * CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276818). * CVE-2026-72055: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink (bsc#1276821). * CVE-2026-72061: net: sit: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277249). * CVE-2026-72063: gpio: tegra: do not call pinctrl for GPIO direction (bsc#1277148). * CVE-2026-72066: cpu: hotplug: Bound hotplug states sysfs output (bsc#1277149). * CVE-2026-72085: scsi: xen: scsiback: Free unsubmitted command instead of double-putting it (bsc#1275542). * CVE-2026-72086: scsi: xen: scsiback: Free the command tag on the TMR submit- failure path (bsc#1277179). * CVE-2026-72098: dm-verity: fix buffer overflow in FEC calculation (bsc#1275543). * CVE-2026-72102: dm_early_create: fix freeing used table on dm_resume failure (bsc#1277314). * CVE-2026-72106: dm-ioctl: fix a possible overflow in list_version_get_info (bsc#1277321). * CVE-2026-72107: dm era: fix out-of-bounds memory access for non-zero start sector (bsc#1277349). * CVE-2026-72108: dm thin metadata: fix metadata snapshot consistency on commit failure (bsc#1277350). * CVE-2026-72129: nvmet-rdma: handle inline data with a nonzero offset (bsc#1275545). * CVE-2026-72130: nvmet: Introduce nvmet_req_transfer_len() (bsc#1275549). * CVE-2026-72135: tpm: Make the TPM character devices non-seekable (bsc#1277571). * CVE-2026-72136: xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink (bsc#1277574). * CVE-2026-72138: xen/gntdev: fix error handling in ioctl (bsc#1277235). * CVE-2026-72157: net: thunderbolt: Fix frags[] overflow by bounding frame_count (bsc#1277544). * CVE-2026-72161: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() (bsc#1277233). * CVE-2026-72163: ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits (bsc#1277231). * CVE-2026-72164: ocfs2: avoid moving extents to occupied clusters (bsc#1277553). * CVE-2026-72166: net/9p: fix infinite loop in p9_client_rpc on fatal signal (bsc#1277556). * CVE-2026-72218: lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure (bsc#1277218). * CVE-2026-72219: lockd: Plug nlm_file leak when nlm_do_fopen() fails (bsc#1277217). * CVE-2026-72224: nvdimm/btt: Free arenas on btt_init() error paths (bsc#1277215). * CVE-2026-72237: perf/x86/amd/brs: Fix kernel address leakage (bsc#1277615). * CVE-2026-72242: selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() (bsc#1277655). * CVE-2026-72243: selinux: check connect-related permissions on TCP Fast Open (bsc#1277656). * CVE-2026-72247: netfilter: nf_conncount: fix zone comparison in tuple dedup (bsc#1277662). * CVE-2026-72256: netfilter: xt_cluster: reject template conntracks in hash match (bsc#1277674). * CVE-2026-72282: KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers (bsc#1277728). * CVE-2026-72297: net: atm: reject out-of-range traffic classes in QoS validation (bsc#1277738). * CVE-2026-72299: tipc: restrict socket queue dumps in enqueue tracepoints (bsc#1275924). * CVE-2026-72306: vduse: Requeue failed read to send_list head (bsc#1277748). * CVE-2026-72321: ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() (bsc#1277143). * CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). * CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). * CVE-2026-72325: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path (bsc#1277761). * CVE-2026-72330: net/tls: Consume empty data records in tls_sw_read_sock() (bsc#1277764). * CVE-2026-72339: qede: fix off-by-one in BD ring consumption on build_skb failure (bsc#1276006). * CVE-2026-72347: netfilter: xt_connmark: reject invalid shift parameters (bsc#1277783). * CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). * CVE-2026-72349: netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() (bsc#1277784). * CVE-2026-72350: netfilter: xt_u32: reject invalid shift counts (bsc#1277822). * CVE-2026-72351: gue: validate REMCSUM private option length (bsc#1276009). * CVE-2026-72352: HID: bpf: Fix hid_bpf_get_data() range check (bsc#1277823). * CVE-2026-72379: fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid (bsc#1277818). * CVE-2026-72383: sctp: fix addr_wq_timer race in sctp_free_addr_wq() (bsc#1277857). * CVE-2026-72392: ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi- batch dump (bsc#1277128). * CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). * CVE-2026-72399: net: enetc: check the number of BDs needed for xdp_frame (bsc#1276553). * CVE-2026-72404: tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() (bsc#1278031). * CVE-2026-72406: net: sungem: fix probe error cleanup (bsc#1278035). * CVE-2026-72413: sctp: fix err_chunk memory leaks in INIT handling (bsc#1277122). * CVE-2026-72421: ipv4: fib: Don't ignore error route in local/main tables (bsc#1277023). * CVE-2026-72425: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() (bsc#1277120). * CVE-2026-72433: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak (bsc#1278053). * CVE-2026-72434: netfilter: ipset: make sure gc is properly stopped (bsc#1278054). * CVE-2026-72435: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() (bsc#1278056). * CVE-2026-72436: netfilter: ipset: Fix data race between add and dump in all hash types (bsc#1277245). * CVE-2026-72437: md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry (bsc#1277874). * CVE-2026-72438: md/raid10: fix writes_pending and barrier reference leaks on discard failures (bsc#1277115). * CVE-2026-72439: md/raid10: fix writes_pending leak on write request failures (bsc#1277876). * CVE-2026-72440: md/raid1: fix writes_pending and barrier reference leaks on write failures (bsc#1277114). * CVE-2026-72444: flow_dissector: check device type before reading ETH_ADDRS (bsc#1278100). * CVE-2026-72447: sctp: hold socket lock when dumping endpoints in sctp_diag (bsc#1277109). * CVE-2026-72448: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown (bsc#1277108). * CVE-2026-72449: drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm (bsc#1278108). * CVE-2026-72450: xfrm: validate selector family and prefixlen during match (bsc#1278113). * CVE-2026-72459: apparmor: aa_label_alloc use aa_label_free on alloc failure (bsc#1277092). * CVE-2026-72460: apparmor: check label build before no_new_privs test (bsc#1277229). * CVE-2026-72487: PCI: Introduce named defines for PCI ROM (bsc#1276767). * CVE-2026-72488: soundwire: fix bug in sdw_add_element_group_count found by syzkaller (bsc#1276766). * CVE-2026-74255: tipc: fix UAF in tipc_l2_send_msg() (bsc#1276547). * CVE-2026-74256: bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check (bsc#1276535). * CVE-2026-74257: sockmap: Fix use-after-free in udp_bpf_recvmsg() (bsc#1276532). * CVE-2026-74258: bpf: Guard __get_user acesss with access_ok for uprobe_multi data (bsc#1276538). * CVE-2026-74261: ALSA: seq: avoid stale FIFO cells during resize (bsc#1276528). * CVE-2026-74267: net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen (bsc#1276519). * CVE-2026-74268: tcp: clear sock_ops cb flags before force-closing a child socket (bsc#1276508). * CVE-2026-74270: handshake: Require admin permission for DONE command (bsc#1276512). * CVE-2026-74278: ALSA: seq: Fix kernel heap address leak in bounce_error_event() (bsc#1278132). * CVE-2026-74281: tipc: reject inverted service ranges from peer bindings (bsc#1276474). * CVE-2026-74282: tipc: prevent snt_unacked underflow on CONN_ACK (bsc#1276473). * CVE-2026-74283: tipc: require net admin for TIPCv2 netlink mutators (bsc#1276475). * CVE-2026-74284: net/sched: sch_hfsc: Don't make class passive twice (bsc#1276468). * CVE-2026-74288: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump() (bsc#1276460). * CVE-2026-74289: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify() (bsc#1276461). * CVE-2026-74290: net/sched: cls_flow: Dont expose folded kernel pointers (bsc#1276462). * CVE-2026-74302: Bluetooth: hci_core: Fix UAF in hci_unregister_dev() (bsc#1276445). * CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT (bsc#1276905). * CVE-2026-74308: ext4: fix kernel BUG in ext4_write_inline_data_end (bsc#1276880). * CVE-2026-74310: vhost/net: complete zerocopy ubufs only once (bsc#1276891). * CVE-2026-74313: vduse: hold vduse_lock across IDR lookup in open path (bsc#1276876). * CVE-2026-74317: ixgbe: do not configure xps for XDP queues (bsc#1276866). * CVE-2026-74330: configfs: fix lockless traversals of ->s_children (bsc#1277129). * CVE-2026-74346: RDMA/irdma: Fix OOB read during CQ MR registration (bsc#1278155). * CVE-2026-74349: ocfs2: reject FITRIM ranges shorter than a cluster (bsc#1278180). * CVE-2026-74356: vhost: move smp_rmb() into vhost_get_avail_idx() (bsc#1278063). * CVE-2026-74359: configfs_lookup(): don't leave ->s_dentry dangling on failure (bsc#1278067). * CVE-2026-74363: bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs (bsc#1278070). * CVE-2026-74365: kabi: nvdimm/btt: handling (bsc#1278225). * CVE-2026-74375: md: replace wait loop with wait_event() in md_handle_request() (bsc#1277649). * CVE-2026-74376: md/raid10: reset read_slot when reusing r10bio for discard (bsc#1277401). * CVE-2026-74377: RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path (bsc#1278236). * CVE-2026-74378: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (bsc#1278233). * CVE-2026-74382: net/sched: cls_bpf: prevent unbounded recursion in offload rollback (bsc#1278240). * CVE-2026-74384: nvme-multipath: fix flex array size in struct nvme_ns_head (bsc#1277405). * CVE-2026-74385: nvmet-tcp: check return value of nvmet_tcp_set_queue_sock (bsc#1278255). * CVE-2026-74386: nvmet-tcp: fix page fragment cache leak in error path (bsc#1277098). * CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). * CVE-2026-74389: RDMA/hns: Fix log flood after cmd_mbox failure (bsc#1278087). * CVE-2026-74390: RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs (bsc#1278088). * CVE-2026-74391: tracing: Bound synthetic-field strings with seq_buf (bsc#1278091). * CVE-2026-74397: IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier (bsc#1278098). * CVE-2026-74398: ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD (bsc#1277410). * CVE-2026-74406: vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive() (bsc#1276395). * CVE-2026-74443: drm/vmwgfx: bound DMA command body size against suffix pointer (bsc#1278210). * CVE-2026-74444: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division (bsc#1278211). * CVE-2026-74450: drm/amd/pm: fix pptable use-after-free (bsc#1278216). * CVE-2026-74453: drm/vc4: Zero the tile state data array before each BIN job (bsc#1278178). * CVE-2026-74464: net: openvswitch: fix skb leak on flow key update failure during ct (bsc#1277070). * CVE-2026-74465: net: openvswitch: fix potential UAF on meter attach failure (bsc#1277801). * CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls (bsc#1277805). * CVE-2026-74469: sctp: prevent peer transport count overflow (bsc#1277792). * CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events() (bsc#1277781). * CVE-2026-74473: vxlan: use pskb_network_may_pull() in route_shortcircuit() (bsc#1276340). * CVE-2026-74475: vxlan: unclone skb head before modifying eth header in route_shortcircuit() (bsc#1276339). * CVE-2026-74476: veth: convert frag_list skbs before running XDP (bsc#1276341). * CVE-2026-74479: net: pktgen: fix proc entry use-after-free (bsc#1276354). * CVE-2026-74480: net: bridge: stop fast-leave after deleting a port group (bsc#1276353). * CVE-2026-74485: binfmt_misc: reject a flag character as the field delimiter (bsc#1277892). * CVE-2026-74487: binfmt_misc: restore write access when removing an entry (bsc#1276349). * CVE-2026-74490: tipc: avoid use-after-free in poll trace queue dumps (bsc#1276352). * CVE-2026-74492: netfilter: ipset: do not update comments from kernel-side hash adds (bsc#1276337). * CVE-2026-74493: net/smc: fix socket use-after-free during link group termination (bsc#1276338). * CVE-2026-74515: KVM: s390: pci: Reject adapter interrupt forwarding if already enabled (bsc#1275953). * CVE-2026-74523: qede: sync udp_tunnel ports outside qede_lock in the recovery path (bsc#1275802). * CVE-2026-74536: Bluetooth: ISO: fix leaking sk after socket release (bsc#1275799). * CVE-2026-74540: Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp (bsc#1275681). * CVE-2026-74541: Bluetooth: ISO: clear iso_data always when detaching conn from hcon (bsc#1275694). * CVE-2026-74553: hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 (bsc#1275684). * CVE-2026-74555: scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race (bsc#1275690). * CVE-2026-74557: scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer (bsc#1275685). * CVE-2026-74564: netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH (bsc#1275567). * CVE-2026-74579: netfilter: nft_payload: fix mask build for partial field offload (bsc#1275559). * CVE-2026-74580: vhost: reset the vring metadata cache on vring reconfiguration (bsc#1277885). * CVE-2026-74586: sctp: clear new_transport when removing a peer (bsc#1277820). * CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). * CVE-2026-74589: bpf, sockmap: Fix sk_redir use-after-free in send verdict (bsc#1277904). * CVE-2026-74592: ima: Instantiate file_truncate and path_truncate hooks (bsc#1277900). * CVE-2026-74594: sched/psi: Shut down rtpoll_timer in psi_cgroup_free() (bsc#1277843). * CVE-2026-74595: fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() (bsc#1277910). * CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). * CVE-2026-74598: ipv6: fix Route Information option length validation (bsc#1277918). * CVE-2026-74600: mm/page_table_check: skip special zero mappings (bsc#1277640). * CVE-2026-74601: ring-buffer: Use current_context for safe per-CPU buffer swap (bsc#1277896). * CVE-2026-74603: ptp: ocp: Fix board ID over-read (bsc#1277915). * CVE-2026-74608: smb: client: Fix use-after-free in cifs_try_adding_channels() (bsc#1277796). * CVE-2026-74609: tipc: read le->link under the node lock in tipc_node_link_down() (bsc#1277906). * CVE-2026-74612: veth: fix skb length accounting after XDP frag adjustment (bsc#1277505). * CVE-2026-74615: vxlan: do not arm the ageing timer on a device that is down (bsc#1277901). * CVE-2026-74616: xdp: reject clones that overrun skb_shared_info tailroom (bsc#1277813). * CVE-2026-74622: net: atlantic: free RX pages of consumed but not refilled buffers (bsc#1277862). * CVE-2026-74625: netfilter: bridge: release template ct on non-IP path (bsc#1277036). * CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). * CVE-2026-74631: net: smc: fix splice entry lifetime imbalance in smc_rx_splice (bsc#1278195). * CVE-2026-74632: mm/huge_memory: fix huge_zero_pfn race (bsc#1278199). * CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields (bsc#1277371). * CVE-2026-74637: perf: Fix dangling cgroup pointer in cpuctx (bsc#1277372). * CVE-2026-74638: drm/v3d: Serialize the scheduler timeout handlers (bsc#1277374). * CVE-2026-74659: net: bridge: mrp: fix uninitialised bytes on the wire (bsc#1277296). * CVE-2026-74660: netfilter: ebt_nflog: pin the NFLOG backend (bsc#1277272). * CVE-2026-74663: net/sched: reject overly deep qdisc hierarchies (bsc#1278311). * CVE-2026-74666: packet: synchronize pressure clearing with ring reconfiguration (bsc#1277032). * CVE-2026-74667: net/packet: reset the MAC header on the packet-socket transmit path (bsc#1277396). * CVE-2026-74671: ima: fix out-of-bounds read in xattr_verify() (bsc#1277392). * CVE-2026-74688: sctp: clear control chunk transport if it is being removed (bsc#1277489). * CVE-2026-74689: net/atm: fix slab-out-of-bounds read in vcc_setsockopt() (bsc#1278314). * CVE-2026-74696: tcp: fix TFO max_qlen accounting across reuseport migration (bsc#1276930). * CVE-2026-74697: bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips (bsc#1277897). * CVE-2026-74700: net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers (bsc#1277626). * CVE-2026-74701: net/openvswitch: check Ethernet header length in key_extract() (bsc#1276921). * CVE-2026-74705: udp: fix potential use-after-free in tunnel segmentation (bsc#1276922). * CVE-2026-74710: xsk: require at least 16 bytes of TX metadata (bsc#1276579). * CVE-2026-74713: vhost_iotlb: bound map allocation in add_range (bsc#1276570). * CVE-2026-74718: devlink: fix net namespace reference leak in reload (bsc#1276573). * CVE-2026-74719: net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() (bsc#1276572). * CVE-2026-74725: enic: fix tx_hang_reset use-after-free on device removal (bsc#1276563). * CVE-2026-74726: bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor (bsc#1276565). * CVE-2026-74735: l2tp: fix tunnel and session refcount leak on seq_file release (bsc#1277030). * CVE-2026-74737: net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG (bsc#1277898). * CVE-2026-74739: net/sched: cls_u32: skip hash tables in u32_bind_class() (bsc#1278247). * CVE-2026-74743: macvlan: inherit needed_headroom and needed_tailroom from lowerdev (bsc#1277908). * CVE-2026-74744: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (bsc#1278094). * CVE-2026-74752: sctp: validate cookie AUTH state before use (bsc#1278315). * CVE-2026-80540: drm/amdgpu: Fix UVD decode image min size calculation (bsc#1277590). * CVE-2026-80557: libceph: fix OOB read in decode_watchers() via missing bounds check (bsc#1277268). * CVE-2026-80580: fbdev: bound mode sysfs output to the sysfs buffer (bsc#1278294). * CVE-2026-80585: mptcp: fastopen: only mark MPTFO subflows with SYN data (bsc#1277342). * CVE-2026-80586: mptcp: options: reset DSS fields in case of unexpected size (bsc#1277328). * CVE-2026-80589: block: stop the timeout timer when releasing a never added disk (bsc#1277335). * CVE-2026-80603: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read (bsc#1278293). * CVE-2026-80613: veth: fix NAPI leak in XDP enable error path (bsc#1278205). * CVE-2026-80629: octeontx2-af: npc: Fix size of entry2cntr_map (bsc#1277308). * CVE-2026-80631: btrfs: lzo: reject compressed segment that overflows the compressed input (bsc#1277558). * CVE-2026-80646: ipv6: guard against possible NULL deref in __in6_dev_stats_get() (bsc#1277513). * CVE-2026-80647: RDMA/hns: Fix warning in poll cq direct mode (bsc#1278331). * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). * CVE-2026-80664: netfilter: xt_nat: reject unsupported target families (bsc#1277555). * CVE-2026-80667: net/mlx5: LAG, MPESW, Fix missing complete() on devcom error (bsc#1278324). * CVE-2026-80679: s390/dasd: Fix potential NULL pointer dereference (bsc#1277557). * CVE-2026-80681: vxlan: re-fetch eth header after route_shortcircuit() (bsc#1278416). * CVE-2026-80686: mm: migrate_device: fix pte_pfn/pte_dirty called on non- present PTE (bsc#1278245). * CVE-2026-80693: idpf: bound interrupt-vector register fill to the allocated array (bsc#1278395). * CVE-2026-80714: ipvs: do not propagate one-packet flag to synced conns (bsc#1277561). * CVE-2026-80715: igc: remove napi_synchronize() in igc_down() (bsc#1277840). * CVE-2026-80716: ALSA: pcm: wake linked drain waiters on unlink (bsc#1277837). * CVE-2026-80722: wifi: mac80211: validate individual TWT params before driver setup (bsc#1277860). * CVE-2026-80725: net: gro: properly validate BIG TCP aggregation criteria (bsc#1277452). * CVE-2026-80731: net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header (bsc#1278716). * CVE-2026-80737: serial: amba-pl011: synchronize DMA teardown (bsc#1279487). * CVE-2026-80739: net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock (bsc#1278733). * CVE-2026-80747: drm/amdkfd: Add bounds check for CRAT subtype length (bsc#1279536). * CVE-2026-80756: selinux: do not cancel a policy conversion that never started (bsc#1278708). * CVE-2026-80785: fbdev: serialize mode sysfs access with lock_fb_info() (bsc#1279619). * CVE-2026-80789: nvmet-tcp: bound SGL data length before allocating command buffers (bsc#1279621). * CVE-2026-80793: ipv4: reject undersized MTUs in ip_do_fragment() (bsc#1279799). * CVE-2026-80799: nfc: llcp: fix OOB read and u8 offset wrap in TLV parsers (bsc#1279811). * CVE-2026-80805: xfs: validate attr entry pointer before field access (bsc#1279580). * CVE-2026-80836: crypto: virtio - bound the akcipher result length (bsc#1279819). * CVE-2026-80840: ipv6: seg6: clear IPv4 control block on IPIP decapsulation (bsc#1279875). * CVE-2026-80841: net/packet: defer vmalloc TX_RING free until skbs finish (bsc#1279835). * CVE-2026-80842: net: bridge: mcast: fix use-after-free of a master VLAN's multicast context (bsc#1279888). * CVE-2026-80844: xfrm: ah6: validate routing header segments_left (bsc#1279786). * CVE-2026-80846: xfrm: drop ESP-in-TCP packets with no ingress device (bsc#1279878). * CVE-2026-80847: tcp: clamp route advmss to TCP_MIN_MSS (bsc#1279850). * CVE-2026-80848: xfrm: espintcp: fix UAF during close (bsc#1279581). * CVE-2026-80852: tls: device: fix out-of-bounds write in tls_append_frag() (bsc#1279532). * CVE-2026-80863: RDMA/rxe: Fix OOB in free_rd_atomic_resources() (bsc#1279535). * CVE-2026-80864: RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp (bsc#1279525). * CVE-2026-80865: bpf: Add missing access_ok call to copy_user_syms (bsc#1279527). * CVE-2026-80880: IB/mlx5: Properly support implicit ODP rereg_mr (bsc#1279497). * CVE-2026-80909: drm/amdgpu: Reject UVD message with invalid number of h265 refs (bsc#1279422). * CVE-2026-80932: vsock/virtio: flush works in dependency order (bsc#1280143). * CVE-2026-80976: seg6: reset IP6CB after IPv6 decapsulation (bsc#1280298). * CVE-2026-80983: net/smc: fix socket refcount leak in smc_switch_conns() (bsc#1280296). * CVE-2026-81000: net: tun: bound receive headroom (bsc#1280263). * CVE-2026-81001: slip: fix use-after-free in sl_sync() (bsc#1280375). * CVE-2026-89448: iommu/vt-d: Force requesting ACS when tboot is enabled (bsc#1280379). * CVE-2026-89451: iommu/sva: Set handle->dev before the SVA handle is visible (bsc#1280383). * CVE-2026-89477: sctp: fix NULL deref on untransmitted RECONF completion (bsc#1280338). * CVE-2026-89479: sctp: stop processing a packet once its association is deleted (bsc#1280786). * CVE-2026-89480: nvme-tcp: reject a read that transferred too few bytes (bsc#1280449). * CVE-2026-89481: nvme-tcp: fix host memory disclosure on R2T for a read command (bsc#1280451). * CVE-2026-89482: nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone (bsc#1280350). * CVE-2026-89485: lockd: pin next file across nlm_inspect_file lock-drop (bsc#1280456). * CVE-2026-89508: RDMA/ucma: Lock the handler in ucma_set_ib_path() (bsc#1280544). * CVE-2026-89510: RDMA/cxgb4: Cancel reg_work before freeing device on remove (bsc#1280551). * CVE-2026-89511: qede: Fix NULL pointer dereference in TPA fragment processing (bsc#1280508). * CVE-2026-89525: udf: reject VAT indexes equal to the entry count (bsc#1282288). * CVE-2026-89531: svcrdma: Reject connection when transport allocation fails (bsc#1281738). * CVE-2026-89532: svcrdma: Fix pcl_for_each_segment for empty chunks (bsc#1280985). * CVE-2026-89533: svcrdma: Fix offset arithmetic in read_chunk_range (bsc#1280993). * CVE-2026-89536: SUNRPC: wait for in-flight client TLS handshake callback (bsc#1280711). * CVE-2026-89538: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field (bsc#1280716). * CVE-2026-89539: SUNRPC: reject duplicate CREDS_VALUE options (bsc#1280717). * CVE-2026-89540: sunrpc: init gssp_lock before publishing proc entry (bsc#1280719). * CVE-2026-89541: SUNRPC: harden gss_unwrap_resp_priv length checks (bsc#1280388). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89544: SUNRPC: fix gssx_dec_option_array error path bugs (bsc#1280758). * CVE-2026-89547: SUNRPC: Check svc pool percpu counter allocation (bsc#1280548). * CVE-2026-89548: SUNRPC: always drain cache_cleaner before destroying a cache_detail (bsc#1280546). * CVE-2026-89550: SUNRPC: svcauth_gss: enforce krb5 token minimum length (bsc#1280726). * CVE-2026-89551: SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow (bsc#1280727). * CVE-2026-89564: ip: orphan prefetched skbs before multicast forwarding (bsc#1280797). * CVE-2026-89569: Bluetooth: RFCOMM: serialize security confirmation handling (bsc#1280733). * CVE-2026-89580: bpf: Disable preemption in __bpf_get_stack (bsc#1280577). * CVE-2026-89603: entry: Fix seccomp bypass after ptrace with TSYNC (bsc#1280923). * CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue (bsc#1281793). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89638: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions (bsc#1281046). * CVE-2026-89644: btrfs: fix extent map leak in NOCOW direct I/O write (bsc#1281054). * CVE-2026-89662: NFSD: Prevent lock owner use-after-free during client teardown (bsc#1280509). * CVE-2026-89663: nfsd: revoke copy-notify stateids before dropping their reference (bsc#1280518). * CVE-2026-89665: nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE (bsc#1281057). * CVE-2026-89671: nfsd: gate nfs3 setacl by argp->mask (bsc#1280252). * CVE-2026-89672: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). * CVE-2026-89673: nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo (bsc#1280237). * CVE-2026-89674: nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget (bsc#1280243). * CVE-2026-89680: nfsd: fix nfsd_file leak on inter-server COPY setup failure (bsc#1280206). * CVE-2026-89684: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280178). * CVE-2026-89686: nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke (bsc#1280184). * CVE-2026-89694: nfsd: check client ownership when cancelling a copy-notify stateid (bsc#1280151). * CVE-2026-89696: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref (bsc#1280146). * CVE-2026-89697: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() (bsc#1280148). * CVE-2026-89699: nfsd: validate symlink target length in NFSv4 CREATE (bsc#1281077). * CVE-2026-89702: nfsd: size fh_verify server sockaddr slot by xpt_locallen (bsc#1280487). * CVE-2026-89704: nfsd: sample writeback error cursor before async COPY loop (bsc#1280490). * CVE-2026-89707: nfsd: release path refs on follow_down() error (bsc#1280468). * CVE-2026-89710: NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path (bsc#1280455). * CVE-2026-89712: NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock (bsc#1280870). * CVE-2026-89713: NFSD: check truncate permission under inode lock (bsc#1280872). * CVE-2026-89784: SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 (bsc#1281224). * CVE-2026-89789: gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free (bsc#1281226). * CVE-2026-89899: media: cec: disable delayed work before freeing an interrupted transmit (bsc#1281383). * CVE-2026-89912: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save (bsc#1281201). * CVE-2026-89913: KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables (bsc#1281202). * CVE-2026-89929: KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02 (bsc#1281358). * CVE-2026-89930: KVM: nVMX: Service local TLB flushes on failed nested VM- Enter (bsc#1281359). * CVE-2026-89931: KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (bsc#1281427). * CVE-2026-89968: nvmet-tcp: reject unsolicited H2CData PDUs (bsc#1281229). * CVE-2026-89970: nvmet-auth: Synchronize timeout work during SQ teardown (bsc#1281231). * CVE-2026-89984: perf/x86/intel: Fix kernel address leakages in LBR stack (bsc#1281273). * CVE-2026-90003: futex: Prevent rcuwait use-after-free during requeue PI (bsc#1281295). * CVE-2026-90074: net/sched: fq_pie: clamp default quantum to avoid signed overflow (bsc#1281496). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-90097: Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition (bsc#1281514). * CVE-2026-90104: NFSv4.1: zero referring call lists before decoding (bsc#1281546). * CVE-2026-90149: NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers (bsc#1281955). * CVE-2026-90151: NFSv4: remove callback IDR entry on client allocation failure (bsc#1281599). * CVE-2026-90182: blk-iocost: clear delay state when freeing policy data (bsc#1281644). * CVE-2026-90183: blk-iolatency: clear delay state when freeing policy data (bsc#1281964). * CVE-2026-90198: ALSA: core: Fix use-after-free in snd_card_do_free() (bsc#1281818). * CVE-2026-90203: Squashfs: check block offset is not negative (bsc#1281808). * CVE-2026-90218: RDMA/cma: Fix WARNING in res_to_rt (bsc#1281795). * CVE-2026-90228: nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns() (bsc#1281717). * CVE-2026-90255: Bluetooth: hci_conn: fix the SCO setup context lifetime (bsc#1281694). * CVE-2026-90259: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() (bsc#1281680). * CVE-2026-90263: btrfs: check if root is readonly when setting posix acl (bsc#1281922). * CVE-2026-90265: btrfs: defrag: fix deadlock between defrag and delalloc space reservation (bsc#1282054). * CVE-2026-90292: RDMA/siw: Fix use-after-free in siw_accept() (bsc#1281777). * CVE-2026-90293: IB/isert: post the full-feature receive buffers after session registration (bsc#1281778). * CVE-2026-90294: IB/isert: delay the final Login Response until the session is registered (bsc#1281732). * CVE-2026-90307: RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ (bsc#1282050). * CVE-2026-90308: RDMA/erdma: Hold QP references for AE and CM processing (bsc#1281786). * CVE-2026-90309: RDMA/erdma: Hold CQ references when processing EQ events (bsc#1281789). * CVE-2026-90358: bpf, x86: Fix trampoline stack size for 128-bit arguments (bsc#1281825). * CVE-2026-90388: iommu/dma: Check atomic pool allocation result directly (bsc#1282197). * CVE-2026-90413: IB/isert: reject login PDUs declaring more data than was received (bsc#1282113). * CVE-2026-90414: IB/isert: reject PDUs declaring more data than (bsc#1282110). * CVE-2026-90415: RDMA/cxgb4: free STAG index when TPT entry write fails (bsc#1282143). * CVE-2026-90417: RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() (bsc#1281973). * CVE-2026-90434: isofs: release zisofs block pointer buffer head (bsc#1281993). * CVE-2026-92495: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap (bsc#1282072). * CVE-2026-92500: ext4: use fsdata to track inline data write state and fix race (bsc#1282193). * CVE-2026-92503: ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() (bsc#1282383). * CVE-2026-92507: RDMA/core: Fix potential use after free in ib_dealloc_pd_user() (bsc#1281988). * CVE-2026-92508: RDMA/core: Fix potential use after free in ib_free_cq() (bsc#1282034). * CVE-2026-92509: RDMA/core: Fix potential use after free in counter_release() (bsc#1282040). * CVE-2026-92510: RDMA/core: Fix potential use after free in ib_destroy_srq_user() (bsc#1282041). * CVE-2026-92511: RDMA/core: Fix potential use after free in ib_destroy_cq_user() (bsc#1282042). * CVE-2026-92512: RDMA/core: Fix use after free in ib_query_qp() (bsc#1281995). * CVE-2026-92514: RDMA/erdma: Fix CEQ tasklet use-after-free on removal (bsc#1281997). * CVE-2026-92523: RDMA/nldev: validate dynamic counter attribute length (bsc#1282271). * CVE-2026-92525: RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[] (bsc#1282270). * CVE-2026-93037: RDMA/hfi1: Propagate sdma_txinit_ahg() errors (bsc#1282020). * CVE-2026-93102: RDMA/hfi1: Free RX data on late probe failure (bsc#1282170). * CVE-2026-93103: RDMA/hfi1: Preserve unit 0 on (bsc#1282286). * CVE-2026-93104: RDMA/rvt: Return NULL after port allocation failure (bsc#1282284). * CVE-2026-93107: RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state (bsc#1281399). * CVE-2026-93108: RDMA/ipoib: Drain RCU callbacks during module teardown (bsc#1281408). * CVE-2026-93109: RDMA/mlx5: Drain RCU callbacks during module teardown (bsc#1281379). * CVE-2026-93110: RDMA/core: Wait for RCU callbacks before unloading ib_core (bsc#1281387). * CVE-2026-93154: RDMA/irdma: Add refcounting to user ring MRs (bsc#1282104). * CVE-2026-93207: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (bsc#1282672). * CVE-2026-93212: nfsd: guard nfsd_serv deref in nfsd_file_net_dispose (bsc#1282774). * CVE-2026-93264: RDMA/efa: Fix PBL chunk length computation (bsc#1282812). * CVE-2026-93269: ext4: fix circular lock dependency in ext4_ext_migrate (bsc#1282810). * CVE-2026-93782: vhost-scsi: flush backend after device ioctls (bsc#1282906). * CVE-2026-93794: smb/client: flush dirty data before punching a hole (bsc#1283154). * CVE-2026-93810: cachefiles: Fix double fput (bsc#1283213). * CVE-2026-93813: btrfs: tree-checker: validate INODE_REF's namelen (bsc#1282767). * CVE-2026-93826: HID: hidpp: fix potential UAF in hidpp_connect_event() (bsc#1282891). * CVE-2026-93829: smb: client: fix races in cifsd thread creation (bsc#1282803). * CVE-2026-97421: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() (bsc#1283176). * CVE-2026-97477: RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() (bsc#1283230). * CVE-2026-97505: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() (bsc#1283500). * CVE-2026-97557: smb: client: avoid leaking refcount in cifs_queue_oplock_break() (bsc#1283201). * CVE-2026-97934: tracing: Fix memory corruption from a "STACKTRACE" histogram key (bsc#1282997). * CVE-2026-97940: ipv6: fix fib6 walker UAF on seq stop (bsc#1283163). * CVE-2026-97950: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry (bsc#1283121). * CVE-2026-98003: iommu/amd: Do not reallocate GA log buffers on resume (bsc#1283312). * CVE-2026-98080: btrfs: do not force reloc root creation during qgroup_account_snapshot() (bsc#1283973). * CVE-2026-98091: btrfs: detach failed sprout device from transaction update list (bsc#1283805). * CVE-2026-98164: KVM: x86/mmu: Check write tracking in all address spaces (bsc#1283935). * CVE-2026-100075: RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters (bsc#1282881). The following non security issues were fixed: * accel/qaic: Address potential out-of-bounds read in resp_worker() (git- fixes). * ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach (stable- fixes). * ACPICA: add boundary checks in acpi_ps_get_next_field() (stable-fixes). * ACPICA: add boundary checks in two places (stable-fixes). * ACPICA: Add package limit checks in parser functions (stable-fixes). * ACPICA: Add validation for node in acpi_ns_build_normalized_path() (stable- fixes). * ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() (stable- fixes). * ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() (stable-fixes). * ACPICA: Fix condition check in acpi_ps_parse_loop() (stable-fixes). * ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) (stable- fixes). * ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() (stable- fixes). * ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() (stable- fixes). * ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() (stable- fixes). * ACPICA: Prevent adding invalid references (stable-fixes). * ACPICA: validate byte_count in acpi_ps_get_next_package_length() (stable- fixes). * ACPICA: validate handler object type in two places (stable-fixes). * ALSA: 6fire: Clean ups with guard() (stable-fixes). * ALSA: 6fire: fix OOB write from device-reported iso length (git-fixes). * ALSA: aloop: Check card index validity at probe (stable-fixes). * ALSA: bcd2000: Fix race between rawmidi and disconnect (git-fixes). * ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev (git-fixes). * ALSA: caiaq: Fix potential double-free at error path (git-fixes). * ALSA: caiaq: unregister the input device when probe fails (git-fixes). * ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough (git-fixes). * ALSA: dummy: Report a change when one capture switch channel moves (git- fixes). * ALSA: es18xx: check control allocation before private data setup (stable- fixes). * ALSA: harmony: initialize locks before requesting IRQ (git-fixes). * ALSA: hda/common: Use cleanup macros for PM controls (stable-fixes). * ALSA: hda/common: Use guard() for mutex locks (stable-fixes). * ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 (stable-fixes). * ALSA: hda/core: Use guard() for mutex locks (stable-fixes). * ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx (stable- fixes). * ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP (stable-fixes). * ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC (stable- fixes). * ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs (stable-fixes). * ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT (stable-fixes). * ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series (stable-fixes). * ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 (git-fixes). * ALSA: hda: Introduce auto cleanup macros for PM (stable-fixes). * ALSA: hda: Report a change when only the channel status bytes move (git- fixes). * ALSA: hda: restore MFG widget enumeration after core split (git-fixes). * ALSA: hda: trace PCM open only after assigning a stream (git-fixes). * ALSA: line6: reject oversized playback packets (git-fixes). * ALSA: mpu401: Check card index validity at probe (stable-fixes). * ALSA: mts64: Check card index validity at probe (stable-fixes). * ALSA: pcm: Fix race between non-atomic ops and trigger-start (stable-fixes). * ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF (git- fixes). * ALSA: pcm: set timer->private_data before registering the PCM timer (git- fixes). * ALSA: portman2x4: Check card index validity at probe (stable-fixes). * ALSA: rawmidi: Return the error from snd_rawmidi_input_params() (git-fixes). * ALSA: seq: oss: Reject reads that cannot fit the next event (stable-fixes). * ALSA: seq: Serialize compat port-info ioctls (git-fixes). * ALSA: serial-u16550: Check card index validity at probe (stable-fixes). * ALSA: ua101: reject mismatched capture/playback packet sizes (git-fixes). * ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 (stable-fixes). * ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless (stable- fixes). * ALSA: usb-audio: Add quirk flags for SC13A (stable-fixes). * ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) (stable- fixes). * ALSA: usb-audio: Add quirk for Novation Mininova (stable-fixes). * ALSA: usb-audio: Add quirk for YAMAHA CDS3000 (stable-fixes). * ALSA: usb-audio: caiaq: validate EP1 reply lengths (stable-fixes). * ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() (git-fixes). * ALSA: usb: 6fire: Avoid embedded URBs (stable-fixes). * ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf (git-fixes). * ALSA: usx2y: Drain pending US-428 pipe-4 output commands (stable-fixes). * ALSA: virmidi: Check card index validity at probe (stable-fixes). * ALSA: virtio: reset device before deleting virtqueues (git-fixes). * Also reflect disabled BATMAN in supported.conf Fixes: 4058797e93cc ("Disable CONFIG_BATMAN_ADV (jsc#PED-16892)"). * arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc (git-fixes). * arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation (git-fixes). * arm64: percpu: Fix LSE operations on {8,16}-bit types (git-fixes). * arm64: percpu: Fix this_cpu_and() mask generation (git-fixes). * arm64: percpu: Fix this_cpu_write() casting (git-fixes). * arm64: Use load LSE atomics for the non-return per-CPU atomic operations (git-fixes). * ASoC: ab8500: Correct digital interface format setup (git-fixes). * ASoC: ab8500: Repair the DAPM capture graph (git-fixes). * ASoC: ab8500: Reset the audio block before configuring it (git-fixes). * ASoC: ab8500: Validate and program TDM slots correctly (git-fixes). * ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits (git- fixes). * ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx (stable-fixes). * ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx (stable-fixes). * ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() (git-fixes). * ASoC: bcm: bcm63xx: Publish the OF module aliases (git-fixes). * ASoC: codecs: max98363: fix uninitialized stream_config->type (git-fixes). * ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive (stable-fixes). * ASoC: codecs: rk3328: Use managed GPIO and clock helpers (stable-fixes). * ASoC: codecs: rt274: Fix format setting for 44100 rate (git-fixes). * ASoC: codecs: rt286: Revert delay value for jack setup (git-fixes). * ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type (git- fixes). * ASoC: hdmi-codec: Report a change when the channel status moves (git-fixes). * ASoC: Intel: avs: Clean up streams if their initialization fails (git- fixes). * ASoC: Intel: avs: Clean up the bus when fetching ML caps fails (git-fixes). * ASoC: Intel: catpt: Complete coredump handling (stable-fixes). * ASoC: Intel: SST: Publish the PCI module aliases (git-fixes). * ASoC: mt6351: Publish the OF module alias (git-fixes). * ASoC: qcom: lpass-cpu: use DAI table index for playback constraints (git- fixes). * ASoC: qcom: q6apm: return error code to consumers on failures (stable- fixes). * ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt (stable-fixes). * ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence (stable-fixes). * ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure (stable-fixes). * ASoC: rt5645: Perform the initial jack detect at probe (stable-fixes). * ASoC: sprd: validate compress buffer sizes against fixed allocations (git- fixes). * ASoC: sti: initialize IRQ lock before requesting IRQ (git-fixes). * ASoC: tegra: Fix ASRC Stream6 input threshold control (git-fixes). * ASoC: ti: omap3pandora: update board check to use DT compatible (stable- fixes). * ASoC: ux500: Correct MSP frame and bit clock setup (git-fixes). * ASoC: ux500: Fix MSP stream lifecycle handling (git-fixes). * ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments (git-fixes). * ASoC: ux500: Program the MSP FIFO watermarks (git-fixes). * ASoC: ux500: Propagate MSP setup errors (git-fixes). * ASoC: ux500: Request the MSP MMIO resource (git-fixes). * ASoC: ux500: Validate MSP DAI configuration (git-fixes). * ASoC: wm8903: Move the DRC QR threshold to the register that holds it (git- fixes). * ata: ahci: work around lost interrupts on Marvell 88SE61xx (git-fixes). * Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough (git-fixes). * Bluetooth: btintel: Export few static functions (stable-fixes). * Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config (git- fixes). * Bluetooth: btintel: Print firmware SHA1 (stable-fixes). * Bluetooth: btintel: validate version TLV value lengths (git-fixes). * Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access (git-fixes). * Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown (git-fixes). * Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 (git-fixes). * Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU (stable-fixes). * Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV (stable-fixes). * Bluetooth: btusb: Add support for TP-Link TL-UB250 (stable-fixes). * Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV (stable-fixes). * Bluetooth: btusb: fix NXP IW610 composite device handling (stable-fixes). * Bluetooth: btusb: Fix UAF of btusb_data by rx_work (git-fixes). * Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices (git-fixes). * Bluetooth: btusb: Record matched usb_device_id into btusb_data (stable- fixes). * Bluetooth: btusb: refactor endpoint lookup (stable-fixes). * Bluetooth: coredump: Quiesce dump work on unregister (git-fixes). * Bluetooth: eir: validate service data length before reading UUID (git- fixes). * Bluetooth: hci_codec: validate vendor codec count length (git-fixes). * Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() (git-fixes). * Bluetooth: hci_sock: reject out-of-range OCF values (git-fixes). * Bluetooth: hci_sock: validate event length before filtering (git-fixes). * Bluetooth: hci_sync: Fix accept list UAF during suspend (git-fixes). * Bluetooth: hci_sync: Serialize local codec list cleanup (git-fixes). * Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync() (stable-fixes). * Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() (git-fixes). * Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM (git-fixes). * Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan (git- fixes). * Bluetooth: L2CAP: validate connectionless PSM length (stable-fixes). * Bluetooth: L2CAP: validate frame length before control and FCS access (git- fixes). * Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel (git- fixes). * Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup (git- fixes). * Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO (git-fixes). * Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() (git- fixes). * Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame (stable-fixes). * Bluetooth: SMP: reject Security Request over BR/EDR (git-fixes). * bnxt_en: use irq_update_affinity_hint() (bsc#1280750). * bonding: crypto offload enabled, non-offload slave failover, rekey failed (bsc#1282823). * bus: fsl-mc: wait for the MC firmware to complete its boot (stable-fixes). * can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (git-fixes). * char/nvram: Remove redundant nvram_mutex (stable-fixes). * compiler_types: Introduce __flex_counter() and family (bsc#1280139). * default_gfp(): avoid using the "newfangled" **VA_OPT** trick (bsc#1280139). * dm/amdgpu: fix malformed link_settings debugfs output (git-fixes). * dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc (stable- fixes). * dmaengine: Fix device kref underflow in dma_chan_put() (git-fixes). * dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() (git-fixes). * dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() (git- fixes). * dmaengine: sprd: Fix runtime PM reference leak in probe (git-fixes). * dmaengine: sun6i: fix non-atomic read of DMA position registers (git-fixes). * dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status (git- fixes). * dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() (git-fixes). * dmaengine: wait for RCU readers before releasing dma_device (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA (git-fixes). * dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order (git- fixes). * driver core: Better advertise dev_err_probe() (stable-fixes). * driver core: Make dev_err_probe() silent for -ENOMEM (stable-fixes). * drm/amd/display: Fix CRC open failure during active rendering (stable- fixes). * drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() (git- fixes). * drm/amd/display: fix division by zero in get_estimated_bw() (git-fixes). * drm/amd/display: Fix DPMS using partially updated pipe context (stable- fixes). * drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC (git- fixes). * drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized (stable-fixes). * drm/amd/pm/si: Fix updating clock limits from power states (stable-fixes). * drm/amd/pm/si: Fix updating clock limits on AC/DC (git-fixes). * drm/amd/pm: bound pp_dpm_set_pp_table() memcpy (stable-fixes). * drm/amd/pm: Check SMUv13.0.6/12 metrics integrity (stable-fixes). * drm/amdgpu: check ras and obj before dereference (git-fixes). * drm/amdgpu: check thunderbolt before switcheroo registration (stable-fixes). * drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages (bsc#1284146). * drm/amdgpu: fix ACP MFD device leak on init failure (git-fixes). * drm/amdgpu: fix buffer overflow during vBIOS update (stable-fixes). * drm/amdgpu: fix IP instance memory leak on kobject add failure (git-fixes). * drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() (git-fixes). * drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() (git- fixes). * drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() (git-fixes). * drm/amdgpu: flush pending RCU callbacks on module unload (stable-fixes). * drm/amdgpu: increase hmm range get pages timeout (stable-fixes). * drm/amdgpu: make an improvement on amdgpu_hmm_range_get_pages (stable- fixes). * drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT (stable-fixes). * drm/amdgpu: Use system unbound workqueue for soft IH ring (stable-fixes). * drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id (stable- fixes). * drm/amdkfd: Check bounds on allocate_doorbell (stable-fixes). * drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap (stable-fixes). * drm/amdkfd: fix UAF race in destroy_queue_cpsch (stable-fixes). * drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl (stable-fixes). * drm/amdkfd: Reject zero-sized AQL queue allocations after size halving (stable-fixes). * drm/amdkfd: Remove arbitrary timeout for hmm_range_fault (stable-fixes). * drm/amdkfd: Unwind debug trap enable on copy_to_user failure (stable-fixes). * drm/arm/komeda: fix error handling for clk_prepare_enable() and callers (stable-fixes). * drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend (stable- fixes). * drm/ast: Automatically clean up poll helper (stable-fixes). * drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach (git-fixes). * drm/bridge: tc358768: Set pre_enable_prev_first for reverse order (stable- fixes). * drm/cirrus: Use video aperture helpers (stable-fixes). * drm/drm_exec: fix up contended obj when num_objects is 0 (git-fixes). * drm/gem: Consider GEM object reclaimable if shrinking fails (stable-fixes). * drm/gma500: return errors from Oaktrail HDMI I2C reads (stable-fixes). * drm/gud: Add RCade Display Adapter VID/PID pair (stable-fixes). * drm/gud: fix out-of-bounds write in gud_plane_atomic_check() (git-fixes). * drm/gud: NUL-terminate TV mode names read from the device (git-fixes). * drm/gud: validate TV mode names before creating enum property (git-fixes). * drm/i915: fix incorrect RCU teardown order (git-fixes). * drm/i915: Fix memory leak in query_perf_config_list() (git-fixes). * drm/i915: Guard against NULL driver_data in i915_pci_probe() (stable-fixes). * drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device (git- fixes). * drm/mediatek: Fix ovl adaptor platform device leak (git-fixes). * drm/mediatek: Fix pdev reference leak in mtk_drm_bind() (git-fixes). * drm/msm/adreno: fix autosuspend cleanup during teardown (git-fixes). * drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL (git-fixes). * drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure (git-fixes). * drm/nouveau/clk: don't clobber reclock status when restoring volt/fan (git- fixes). * drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update (git-fixes). * drm/nouveau/disp: don't reject HDMI config on cards without SCDC (git- fixes). * drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE (git-fixes). * drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op (git-fixes). * drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE (git- fixes). * drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() (git-fixes). * drm/nouveau: fix autosuspend cleanup during teardown (git-fixes). * drm/nouveau: Fix bridge reference leak in nv1a_ram_new() (git-fixes). * drm/nouveau: fix double-free in nvif_vmm_dtor (git-fixes). * drm/nouveau: Fix gem reference leak in validate_init() (git-fixes). * drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() (git-fixes). * drm/nouveau: Use write-combined maps for coherent (git-fixes). * drm/omap: dsi: Do not copy isr table (git-fixes). * drm/panel: jadard-jd9365da-h3: set prepare_prev_first (stable-fixes). * drm/panel: simple: Add AM-1280800W8TZQW-T00H (stable-fixes). * drm/radeon: Read the VRAM VBIOS signature with readb() (git-fixes). * drm/vc4: Use managed KMS polling to fix UAF on unbind (git-fixes). * drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() (git-fixes). * drm/virtio: fix memory leak of fence event on execbuffer failure (git- fixes). * drm/virtio: fix NULL pointer dereference on fence allocation failure (git- fixes). * drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() (git- fixes). * drm/virtio: fix object leak when drm_gem_handle_create() fails (git-fixes). * drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() (git-fixes). * drm/virtio: release the GEM object on virtio_gpu_vram_create() errors (git- fixes). * drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used (git- fixes). * drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr (git- fixes). * efi: fix stale reference to efi_recover_from_page_fault() (git-fixes). * fbdev: pm2fb: unwind WC setup on probe failure (stable-fixes). * fbdev: pvr2fb: correct user pointer annotation and sentinel initializer (stable-fixes). * fbdev: vfb: defer cleanup until the last reference (git-fixes). * firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size (stable-fixes). * firmware: arm_scmi: Validate SENSOR_UPDATE payload size (stable-fixes). * firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS (git-fixes). * firmware: stratix10-svc: change get provision data to async SMC call (stable-fixes). * firmware: stratix10-svc: fix FCS SMC call kernel-doc (git-fixes). * gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() (git- fixes). * gpio: dwapb: Mask interrupts at hardware initialization (stable-fixes). * gpio: pisosr: Read "ngpios" as u32 (stable-fixes). * gpio: zynq: fix runtime PM leak on request error path (git-fixes). * HID: alps: fix use-after-free on input2 registration failure (git-fixes). * HID: amd_sfh: Validate PCI BAR size before mapping (git-fixes). * HID: core: quiesce input in hid_hw_stop() to prevent use-after-free (stable- fixes). * HID: elecom: fix bus type for M-XGL20DLBK (git-fixes). * HID: ft260: fix stack-use-after-return write in I2C read race (git-fixes). * HID: ft260: validate i2c input report length (stable-fixes). * HID: i2c-hid: Fix "(null)" output when reading report descriptor fails (git- fixes). * HID: i2c-hid: Fold i2c_hid_execute_reset() into i2c_hid_hwreset() (stable- fixes). * HID: i2c-hid: Move i2c_hid_finish_hwreset() to after reading the report- descriptor (stable-fixes). * HID: i2c-hid: Revert to await reset ACK before reading report descriptor (git-fixes). * HID: i2c-hid: Split i2c_hid_hwreset() in start() and finish() functions (stable-fixes). * HID: i2c-hid: Switch i2c_hid_parse() to goto style error handling (stable- fixes). * HID: logitech-hidpp: fix race condition when accessing stale stack pointer (stable-fixes). * HID: mcp2221: stop device IO before hid_hw_stop (git-fixes). * HID: pidff: Support device error response from PID_BLOCK_LOAD (stable- fixes). * HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard (stable- fixes). * HID: rmi: fix OOB access with undersized RMI reports (git-fixes). * HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() (git-fixes). * HID: wacom: validate report length in wacom_intuos_pro2_bt_irq (git-fixes). * host1x: bus: Fix missing ops null check in error teardown (stable-fixes). * hwmon: (adt7462) Add of_match_table to support devicetree (stable-fixes). * hwmon: (applesmc) fix key backlight workqueue leak on register failure (git- fixes). * hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors (git-fixes). * hwmon: (emc1403) Add support for EMC1428 and EMC1438 (stable-fixes). * hwmon: (emc1403) Add support for EMC1442 (stable-fixes). * hwmon: (emc1403) Convert to with_info API (stable-fixes). * hwmon: (emc1403) Drop hysteresis for low limit temperature (git-fixes). * hwmon: (emc1403) Rely on subsystem locking (stable-fixes). * hwmon: (emc1403) Support 11 bit accuracy (stable-fixes). * hwmon: (gpio-fan) Fix use-after-free in alarm work (git-fixes). * hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler (git- fixes). * hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() (git-fixes). * hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS (git-fixes). * hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i (stable- fixes). * hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding (git-fixes). * hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 (git-fixes). * hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove (git-fixes). * hwmon: (w83793) release probe data through kref (git-fixes). * i2c: at91: release DMA channels on remove and probe error (git-fixes). * i2c: core: fix irq domain leak on adapter registration failure (git-fixes). * i2c: imx: release DMA channels on probe error (git-fixes). * i3c: mipi-i3c-hci: Fix DAT/DCT entry sizes (stable-fixes). * i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1 (git-fixes). * i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() (stable- fixes). * i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA (stable-fixes). * ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink (git-fixes). * ieee802154: cc2520: fix FIFOP work use-after-free (git-fixes). * ieee802154: hwsim: serialize pib updates to fix double-free (git-fixes). * iio: accel: kionix-kx022a: Fix array boundary check (git-fixes). * iio: accel: kxcjk-1013: reject duplicate event disable (git-fixes). * iio: accel: mma8452: switch to non-devm request_threaded_irq() (stable- fixes). * iio: accel: sca3000: fix frequency divider condition check (git-fixes). * iio: adc: max1363: sign-extend bipolar differential channel reads (git- fixes). * iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind (stable-fixes). * iio: adc: stm32-adc: fix check on internal channel availability (git-fixes). * iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure (git-fixes). * iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls (git- fixes). * iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind (git-fixes). * iio: buffer: Ensure bounce buffer used for unaligned case is zeroed (git- fixes). * iio: buffer: serialize buffer teardown with mode claims (git-fixes). * iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() (git-fixes). * iio: gyro: adis16136: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16400: fix unprotected debugfs reads (git-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: gp2ap020a00f: drain irq_work after free_irq (git-fixes). * iio: light: stk3310: Deal with the ps interrupt issue in PM (stable-fixes). * iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup (git-fixes). * iio: proximity: isl29501: Fix return type of isl29501_register_write (git- fixes). * iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure (git-fixes). * iio: proximity: sx9324: Correct proximity channel resolution (git-fixes). * iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler (git-fixes). * iio: trigger: cancel reenable_work before freeing trigger (git-fixes). * inode: make __iget() a static inline (bsc#1282383). * Input: adp5588-keys - cache GPIO state before registering the gpiochip (git- fixes). * Input: aiptek - validate raw macro indices before updating state (stable- fixes). * Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 (git- fixes). * Input: cyttsp5 - clamp the HID report size before memcpy (git-fixes). * Input: eeti_ts - publish the OF module alias (git-fixes). * Input: evdev - zero absinfo before partial copy in EVIOCSABS (git-fixes). * Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P (stable-fixes). * Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() (git- fixes). * Input: s6sy761 - fix resume ordering and restore sensing (git-fixes). * Input: soc_button_array - check btns_desc->package.count (git-fixes). * Input: soc_button_array - fix MS Surface Pro 11 probe failure (git-fixes). * Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) (stable-fixes). * Input: synaptics - limit T440p InterTouch quirk to LEN0036 (git-fixes). * Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound (git- fixes). * Input: trackpoint - fix the inertia attribute name in the ABI document (git- fixes). * Input: xpad - add support for Azeron devices (stable-fixes). * Input: xpad - add support for Victrix Pro BFG Controller (stable-fixes). * Input: xpad - fix PDP Marvel Xbox 360 controller (git-fixes). * Input: zero ff_effect before compat copy in input_ff_effect_from_user (git- fixes). * integrity: Check for NULL returned by asymmetric_key_public_key (stable- fixes). * KEYS: encrypted: fix integer overflow of datablob_len (git-fixes). * keys: fix lost wakeup when reaping a dead key type (git-fixes). * KEYS: trusted: Fix tpm2_load_cmd() boundary check (git-fixes). * KVM: arm64: vgic: Don't leak the SPI array when init is retried (git-fixes). * KVM: arm64: vgic: Free gic_kvm_info on initialization failure (git-fixes). * KVM: nVMX: Always flush vpid02 on first use (git-fixes). * KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit (git- fixes). * KVM: VMX: Prioritize DR7.GD=1 #DB over CPL>0 #GP on Intel (git-fixes). * KVM: x86/hyperv: Check for NULL vCPU Hyper-V object in kvm_hv_get_tlb_flush_fifo() (git-fixes). * KVM: x86/hyperv: Ensure vCPU's Hyper-V object is initialized on cross-vCPU accesses (git-fixes). * KVM: x86/hyperv: Get target FIFO in hv_tlb_flush_enqueue(), not caller (git- fixes). * KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock (git-fixes). * KVM: x86: Manually check DR4/5 write values to fix SVM intercept priority (git-fixes). * KVM: x86: Prioritize #UD on MOV DR over #GP due to non-zero CPL (git-fixes). * KVM: x86: Prioritize DR7.GD #DB over #GP due to illegal DR6/7 value (git- fixes). * KVM: x86: Treat any non-zero return from set_dr() as a faulting condition (git-fixes). * leds: pca9532: Don't stop blinking for non-zero brightness (stable-fixes). * leds: uleds: Return -EFAULT on copy_to_user() failure (stable-fixes). * media: dm1105: fix missing error check for dma_alloc_coherent (stable- fixes). * media: em28xx-video: fix missing res_free() on init_usb_xfer failure (stable-fixes). * media: hevc: add bounded tile-count helpers (git-fixes). * media: imon: Add iMON VFD HID OEM v1.2 key mappings (stable-fixes). * media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (stable-fixes). * media: rc: mceusb: Add support for 04eb:e033 (stable-fixes). * media: v4l2-ctrls: validate AV1 tile counts (git-fixes). * media: v4l2-ctrls: validate HEVC tile counts (git-fixes). * media: v4l2-h264: Fix memcmp() size in B1 reference list comparison (git- fixes). * media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity (git-fixes). * media: video-i2c: fix buffer queue ordering (stable-fixes). * media: video-i2c: use vb2_video_unregister_device on driver removal (stable- fixes). * memstick: ms_block: destroy io_queue workqueue on removal (git-fixes). * mfd: db8500-prcmu: Remove needless return in three void APIs (stable-fixes). * mfd: rsmu: Add 8a34002 support (stable-fixes). * mmc: core: Add validation for host-provided max_segs (stable-fixes). * mmc: core: Cancel SDIO IRQ work before freeing host (git-fixes). * mmc: core: Fix OF node reference leak on card add failure (git-fixes). * mmc: davinci: avoid NULL deref of host->data in IRQ handler (stable-fixes). * mmc: davinci: fix mmc_add_host order in probe (stable-fixes). * mmc: hsq: Fix use-after-free in retry work (git-fixes). * mmc: mxcmmc: cancel data work and watchdog on remove (git-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC (stable-fixes). * mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC (stable-fixes). * mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 (stable- fixes). * mmc: sdhci-of-aspeed: Remove children before releasing SDC resources (git- fixes). * mmc: sdhci_am654: Reset command and data lines on failed tuning (git-fixes). * mmc: sdio_uart: fix xmit_fifo leak when the port table is full (git-fixes). * mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt (git- fixes). * mmc: spi: reset bytes_xfered before retrying CRC failures (git-fixes). * mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ (git- fixes). * mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB (git-fixes). * mtd: spinand: fix zero oobavail when no ECC engine is used (git-fixes). * net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe() (git- fixes). * net: mana: Reserve extra CQ slot for the fence completion CQE (git-fixes). * net: mana: restore the XDP program pointer when pre-allocation fails (git- fixes). * net: tls: Pass union tls_crypto_context pointer to memzero_explicit (bsc#1267564 jsc#PED-16401). * net: usb: catc: bound the RX packet length in catc_rx_done() (git-fixes). * net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist (stable-fixes). * net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow (git-fixes). * net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() (git-fixes). * net: usb: pegasus: don't rely on id table pointer arithmetic (stable-fixes). * net: usb: qmi_wwan: add MeiG SRM813Q (stable-fixes). * net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition (stable-fixes). * net: usb: sr9700: include receive overhead in the length check (git-fixes). * net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value (git-fixes). * net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain (git-fixes). * net: wwan: t7xx: Add delay between MD and SAP suspend (stable-fixes). * net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() (git- fixes). * nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() (git-fixes). * nfc: llcp: fix -ENOMEM on connect with zero-length service name (git-fixes). * nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() (git- fixes). * nfc: llcp: Fix race condition in accept_queue lifecycle (git-fixes). * nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure (git-fixes). * nfc: llcp: fix slab-out-of-bounds reads when logging service names (git- fixes). * nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() (git-fixes). * nfc: nfcmrvl: validate helper command length before pull (git-fixes). * nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() (git-fixes). * nfc: port100: reject frames whose declared length exceeds the received data (git-fixes). * nfc: st21nfca: validate ISO15693 inventory length (git-fixes). * nfc: st21nfca: validate received frame size (git-fixes). * nfc: virtual_ncidev: Add missing ioctl compat handler (git-fixes). * of: fix out-of-bounds read in of_alias_scan() stem parser (git-fixes). * of: property: add missing kerneldoc for of_graph_get_endpoint_count() (stable-fixes). * PCI/MSI: Enable memory decoding before restoring MSI-X messages (git-fixes). * PCI/proc: Avoid spurious runtime PM wakeup on config space accesses (stable- fixes). * PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() (stable- fixes). * PCI/proc: Use file_ns_capable() when checking config space read access (stable-fixes). * PCI/proc: Warn on writes to kernel-exclusive config space regions (stable- fixes). * PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses (stable-fixes). * PCI: Accept AtomicOps already enabled by the hypervisor (git-fixes). * PCI: altera: Protect root bus removal with rescan lock (stable-fixes). * PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems (stable-fixes). * PCI: iproc: Protect root bus removal with rescan lock (stable-fixes). * PCI: mediatek: Protect root bus removal with rescan lock (stable-fixes). * PCI: rockchip: Protect root bus removal with rescan lock (stable-fixes). * PCI: Stop setting cached power state to 'unknown' on unbind (stable-fixes). * PCI: switchtec: Add Gen6 Device IDs (stable-fixes). * PCI: Wait for device readiness after D3hot -> D0uninitialized transition (stable-fixes). * PCI: xgene: Drop unnecessary OF node reference (git-fixes). * PCI: xgene: Drop XGENE_PCIE_IP_VER_UNKN (stable-fixes). * perf: Reject exited events as group leaders (git-fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow (git- fixes). * phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting (git- fixes). * pinctrl: meson: Fix typo in s4 group name (git-fixes). * pinctrl: single: free the IRQ on domain creation failure (git-fixes). * platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table (stable-fixes). * platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table (stable-fixes). * power: supply: sc2731_charger: cancel work on remove (git-fixes). * power: supply: sc2731_charger: Convert to platform remove callback returning void (stable-fixes). * powerpc/crash: stop watchdogs before booting kdump kernel (bsc#1277705 ltc#220979). * powerpc/kexec_file: Use inclusive range checks in add_usable_mem() (git- fixes). * powerpc/pseries: Handle and log pseries-wdt registration failures (bsc#1277705 ltc#220979). * powerpc/pseries: Move H_WATCHDOG definitions to a common header (bsc#1277705 ltc#220979). * powerpc/rtas_pci: No hotplug on permanently removed device on pSeries (git- fixes). * RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations (git- fixes). * RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup (git-fixes). * RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables (git-fixes). * RDMA/hfi1: Align probe error unwinding with device removal (git-fixes). * RDMA/hfi1: Allocate device data after PCI initialization (git-fixes). * RDMA/hfi1: Create workqueues before device initialization (git-fixes). * RDMA/hfi1: Defer device creation until probe succeeds (git-fixes). * RDMA/hfi1: Drop device data from hfi1_validate_rcvhdrcnt() (git-fixes). * RDMA/hfi1: Initialize debugfs after probe completes (git-fixes). * RDMA/hfi1: Pass PCI device to hfi1_pcie_init() (git-fixes). * RDMA/hfi1: Remove redundant NULL checks in create_workqueues() (git-fixes). * RDMA/hfi1: Remove redundant PCI device ID validation (git-fixes). * RDMA/hfi1: Stop flushing the global IB workqueue (git-fixes). * RDMA/irdma: Add a refcount to track user ring MR associations (git-fixes). * RDMA/irdma: Add irdma_cq fields to track pbl allocations (git-fixes). * RDMA/irdma: Deduplicate the irdma_del_memlist logic (git-fixes). * ring-buffer: Remove jump to out label in ring_buffer_swap_cpu() (bsc#1277896). * rtc: aspeed: add AST2700 compatible (stable-fixes). * rtc: bq32000: add delay between RTC reads (stable-fixes). * selftests/alsa: Fix the step check for INTEGER controls (git-fixes). * selftests: tls: add getsockopt test (bsc#1267564 jsc#PED-16401). * selftests: tls: add key_generation argument to tls_crypto_info_init (bsc#1267564 jsc#PED-16401). * selftests: tls: add rekey tests (bsc#1267564 jsc#PED-16401). * serial: 8250: fix possible ISR soft lockup (stable-fixes). * serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() (git-fixes). * serial: tegra: don't clear the Tx FIFO on an Rx-only reset (git-fixes). * serial: vt8500: Fix clock reference leak in vt8500_serial_probe() (git- fixes). * slab.h: disable completely broken overflow handling in flex allocations (bsc#1280139). * slab: Introduce kmalloc_flex() and family (bsc#1280139). * slab: Introduce kmalloc_obj() and family (bsc#1280139). * slab: recognize @GFP parameter as optional in kernel-doc (bsc#1280139). * smb: client: harden DFS cache against invalid target hints (git-fixes). * soc: qcom: geni-se: Correct QUP Core ICC vote constants (git-fixes). * soundwire: cadence_master: wait and cancel cdns->work before clock stop (git-fixes). * soundwire: dmi-quirks: Disable ghost Realtek devices (stable-fixes). * soundwire: only handle alert events when the peripheral is attached (stable- fixes). * soundwire: validate DT compatible before parsing it (stable-fixes). * spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() (stable-fixes). * spi: core: Abort active target transfer on controller suspend (stable- fixes). * spi: dw-dma: Wait for controller idle before completing Tx (stable-fixes). * spi: dw: fix wrong RX_SAMPLE_DLY setting after resume (stable-fixes). * spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM (stable- fixes). * spi: xilinx: let transfers timeout in case of no IRQ (stable-fixes). * staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr() (git-fixes). * staging: rtl8723bs: fix OOB read in rtw_action_frame_parse() (git-fixes). * staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() (git-fixes). * thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries (stable-fixes). * thermal/drivers/tegra/soctherma: Switch to devm cooling device registration (stable-fixes). * thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() (stable-fixes). * thunderbolt: Fix KASAN reported use-after-free when request is canceled (git-fixes). * thunderbolt: Improve multi-display DisplayPort tunnel allocation (stable- fixes). * thunderbolt: Increase timeout for Configuration Ready bit (stable-fixes). * thunderbolt: Keep the domain reference while processing hotplug (stable- fixes). * thunderbolt: Keep XDomain reference during the lifetime of a service (stable-fixes). * thunderbolt: Reject oversized XDomain properties responses (git-fixes). * thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() (stable-fixes). * thunderbolt: Set tb->root_switch to NULL when domain is stopped (stable- fixes). * thunderbolt: Verify Router Ready bit is set after router enumeration (stable-fixes). * tls: add counters for rekey (bsc#1267564 jsc#PED-16401). * tls: block decryption when a rekey is pending (bsc#1267564 jsc#PED-16401). * tls: implement rekey for TLS1.3 (bsc#1267564 jsc#PED-16401). * tls: skip setting sk_write_space on rekey (bsc#1267564 jsc#PED-16401). * tty: serial: qcom_geni_serial: Keep console RX functional after deep idle (git-fixes). * tty: vt: fix memory leak in vc_allocate() (git-fixes). * usb-storage: ene_ub6250: fix race between scan work and probe (stable- fixes). * USB: cdc-acm: fix racy TIOCMIWAIT implementation (git-fixes). * USB: cdc-acm: skip URB restart in port_shutdown if disconnected (git-fixes). * USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set (stable- fixes). * usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe (git-fixes). * usb: cdns3: fix use-after-free in cdns3_gadget_exit() (git-fixes). * usb: chipidea: tegra: disable runtime PM on resume failure (git-fixes). * usb: core: Add lock to usb_wakeup_notification() (stable-fixes). * usb: core: clear both ep_in and ep_out for non-ep0 control endpoints (git- fixes). * usb: core: hcd: fix possible deadlock in rh control transfers (stable- fixes). * usb: core: Strengthen error handling in hub_hub_status() (stable-fixes). * usb: dwc3: am62: Fix runtime PM usage count leak on probe error path (git- fixes). * usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns() (git-fixes). * usb: gadget: aspeed-vhub: cancel wake work on device removal (git-fixes). * usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue (stable- fixes). * usb: gadget: aspeed_udc: check endpoint DMA allocation (git-fixes). * usb: gadget: aspeed_udc: Convert to platform remove callback returning void (stable-fixes). * USB: gadget: dummy-hcd: Fix wait for outstanding request completions (git- fixes). * usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC (git-fixes). * usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd (git-fixes). * USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl() (stable- fixes). * usb: gadget: fix null pointer dereference in usb_put_function_instance() (git-fixes). * usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log (stable-fixes). * usb: gadget: udc: skip pullup() if already connected (stable-fixes). * usb: host: add ARCH_AIROHA in XHCI MTK dependency (stable-fixes). * usb: hub: use shorter 120ms post resume hold for SS root hubs (git-fixes). * usb: image: mdc800: change kmalloc() to kzalloc() (stable-fixes). * usb: octeon-hcd: fix the FIFO-flush timeout computation (git-fixes). * usb: ohci-da8xx: disable controller wakeup on cleanup (git-fixes). * usb: ohci-s3c2410: disable controller wakeup on removal (git-fixes). * usb: ohci-st: disable controller wakeup on removal (git-fixes). * USB: serial: fix driver deregistration order (git-fixes). * USB: serial: fix dynamic id driver deregistration race (git-fixes). * USB: serial: fix port tear down use-after-free (git-fixes). * USB: serial: quatech2: fix baud rate overflow (git-fixes). * usb: serial: spcp8x5: don't store usb_device_id (stable-fixes). * USB: serial: ssu100: fix baud rate overflow (git-fixes). * usb: storage: sierra_ms: reject short SWoC info transfers (git-fixes). * usb: typec: anx7411 - stop the IRQ before destroying the workqueue (git- fixes). * usb: typec: tcpm: recover after failure to start the frs ams (git-fixes). * usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() (git-fixes). * usb: typec: ucsi: displayport: Current CAM OOB index fixup (git-fixes). * usb: typec: ucsi: displayport: Fix OOB altmode array index (git-fixes). * usb: typec: ucsi: Get the connector fwnode based on reg value (git-fixes). * usb: typec: ucsi: glink: fix use-after-free of ucsi on remove (git-fixes). * usb: usbtest: disable dynamic ID support (stable-fixes). * usb: usbtmc: don't store usb_device_id (stable-fixes). * usb: xhci: use cached HCSPARAMS1 value (stable-fixes). * usb: xusbatm: don't rely on id table pointer arithmetic (stable-fixes). * usbip: vhci_hcd: fix NULL deref in status_show_vhci (stable-fixes). * watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog (git- fixes). * watchdog: digicolor: Avoid division by zero (git-fixes). * watchdog: fix hrtimer start when pretimeout is zero (git-fixes). * watchdog: msc313e: Avoid division by zero (git-fixes). * watchdog: msc313e: Enable clock before accessing hardware registers (git- fixes). * watchdog: msc313e: Fix clock leak and spurious timer in settimeout() (git- fixes). * watchdog: msc313e: Fix NULL pointer dereference in PM callbacks (git-fixes). * watchdog: msc313e: Fix premature reset during timeout update (git-fixes). * watchdog: msc313e: Fix spurious reset on suspend (git-fixes). * watchdog: msc313e: Fix undefined behavior (git-fixes). * watchdog: msc313e: Propagate error code in resume() (git-fixes). * watchdog: msc313e: Sync timeout value if WDT was running at boot (git- fixes). * watchdog: rtd119x: Avoid division by zero (git-fixes). * watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() (git- fixes). * watchdog: sunxi_wdt: preserve boot-enabled watchdog (git-fixes). * wifi: ath9k_htc: don't store usb_device_id (stable-fixes). * wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() (git-fixes). * wifi: ath11k: Fix error handling in ath11k_wmi_p2p_noa_event() (git-fixes). * wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi (stable-fixes). * wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event() (git-fixes). * wifi: ath11k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: ath11k: implement handling of P2P NoA event (stable-fixes). * wifi: ath12k: fix stride mismatch in mac_phy_caps_parse() (git-fixes). * wifi: brcmfmac: fix lost 802.1x TX completion wakeup (git-fixes). * wifi: brcmsmac: fix UAF in brcms_free_timer() (git-fixes). * wifi: cfg80211: check IP header size in cfg80211_classify8021d() (git- fixes). * wifi: cfg80211: don't filter by BSS type when removing stale entries (git- fixes). * wifi: cfg80211: only group hidden BSSes with beacon entries (git-fixes). * wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() (stable-fixes). * wifi: cfg80211: validate rx/tx MLME callback frame lengths before access (stable-fixes). * wifi: iwlegacy: fix broadcast stations deallocation (git-fixes). * wifi: iwlwifi: acpi: validate WGDS table revision index (stable-fixes). * wifi: iwlwifi: bound aligned TLV advance in FW parser (stable-fixes). * wifi: iwlwifi: mei: add support for SAP version 4 (stable-fixes). * wifi: iwlwifi: mei: check SAP message length before reading it (git-fixes). * wifi: iwlwifi: mvm: add a check on the tid coming from the firmware (stable- fixes). * wifi: iwlwifi: mvm: fix a possible underflow (stable-fixes). * wifi: iwlwifi: mvm: fix an off-by-1 boundary check (stable-fixes). * wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif (stable- fixes). * wifi: iwlwifi: mvm: fix sched scan IE sizing (stable-fixes). * wifi: iwlwifi: mvm: validate sta_id in BA window status notif (stable- fixes). * wifi: libertas: reject short monitor TX frames (stable-fixes). * wifi: libipw: fix key index receive bound checks (stable-fixes). * wifi: libipw: reject too-short association responses (git-fixes). * wifi: libipw: reject too-short beacon and probe responses (git-fixes). * wifi: mac80211: add HE 6 GHz capability in the scan elems len (git-fixes). * wifi: mac80211: always allow transmitting null-data on TXQs (stable-fixes). * wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver (git-fixes). * wifi: mac80211: don't access the TSF of a down interface (git-fixes). * wifi: mac80211: don't allow link changes when iface is down (git-fixes). * wifi: mac80211: don't offload TC setup on AP_VLAN interfaces (git-fixes). * wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set (git-fixes). * wifi: mac80211: don't start a ROC while scanning (git-fixes). * wifi: mac80211: mesh: release the channel if start fails (git-fixes). * wifi: mac80211: only operate on TDLS peers in the TDLS code (git-fixes). * wifi: mac80211: require a peer station for TDLS setup confirm (git-fixes). * wifi: mac80211: reset state when starting AP fails (git-fixes). * wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown (git-fixes). * wifi: mac80211: set up the TX info early to fix failure paths (git-fixes). * wifi: mac80211: suppress chanctx warning for debugfs reset (git-fixes). * wifi: mac80211: unlist vifs when their netdev is unregistered (git-fixes). * wifi: mac80211: validate deauth frame length before reason access (stable- fixes). * wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1 (git- fixes). * wifi: mt76: mt7915: report RX chain signal for all RX paths (git-fixes). * wifi: mt76: mt7921: skip unknown CLC firmware records (git-fixes). * wifi: mt76: transform aspm_conf for pci_disable_link_state (stable-fixes). * wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length (git- fixes). * wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path (git- fixes). * wifi: mwifiex: replace one-element arrays with flexible array members (stable-fixes). * wifi: mwifiex: validate action frame fixed fields (git-fixes). * wifi: mwifiex: validate scan response extents (git-fixes). * wifi: nl80211: reject beacons with bad HE operation (stable-fixes). * wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST (git-fixes). * wifi: p54: validate curve data length in the calibration curve converters (git-fixes). * wifi: ralink: RT2X00: init EEPROM properly (stable-fixes). * wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers (stable-fixes). * wifi: rsi: fix heap OOB write on key removal (git-fixes). * wifi: rsi: validate beacon length before fixed buffer copy (stable-fixes). * wifi: rtl818x: initialize eeprom_93cx6 struct to zero (git-fixes). * wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() (stable-fixes). * wifi: rtw88: Fix the random "error beacon valid" messages for USB (stable- fixes). * wifi: rtw88: TX QOS Null data the same way as Null data (stable-fixes). * wifi: rtw89: pci: enable LTR based on pcie control register (stable-fixes). * wifi: rtw89: phy: check length before parsing PHY status IE (stable-fixes). * wifi: virt_wifi: don't transfer operstate before register (git-fixes). * wifi: virt_wifi: free skb when disconnected (git-fixes). * wifi: wilc1000: fix out-of-bounds read in P2P public action frames (git- fixes). * wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() (git- fixes). * wifi: wlcore: release runtime PM ref on regdomain config failure (git- fixes). * x86/mm: Fix pmd_modify() dropping the dirty bit (bsc#1275455). * xhci: Prevent queuing new commands if xhci is inaccessible (stable-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-684 ## Package List: * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-64kb-6.4.0-159998.53.1 * kernel-default-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (aarch64) * kernel-64kb-debugsource-6.4.0-159998.53.1 * kernel-64kb-devel-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * kernel-obs-build-6.4.0-159998.53.1 * kernel-obs-build-debugsource-6.4.0-159998.53.1 * kernel-syms-6.4.0-159998.53.1 * kernel-default-devel-6.4.0-159998.53.1 * kernel-default-debugsource-6.4.0-159998.53.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.53.1 ## References: * https://www.suse.com/security/cve/CVE-2024-26730.html * https://www.suse.com/security/cve/CVE-2025-38704.html * https://www.suse.com/security/cve/CVE-2026-100075.html * https://www.suse.com/security/cve/CVE-2026-23128.html * https://www.suse.com/security/cve/CVE-2026-23352.html * https://www.suse.com/security/cve/CVE-2026-31523.html * https://www.suse.com/security/cve/CVE-2026-31689.html * https://www.suse.com/security/cve/CVE-2026-43409.html * https://www.suse.com/security/cve/CVE-2026-43448.html * https://www.suse.com/security/cve/CVE-2026-45836.html * https://www.suse.com/security/cve/CVE-2026-45872.html * https://www.suse.com/security/cve/CVE-2026-46044.html * https://www.suse.com/security/cve/CVE-2026-46135.html * https://www.suse.com/security/cve/CVE-2026-46149.html * https://www.suse.com/security/cve/CVE-2026-46196.html * https://www.suse.com/security/cve/CVE-2026-46304.html * https://www.suse.com/security/cve/CVE-2026-52912.html * https://www.suse.com/security/cve/CVE-2026-53061.html * https://www.suse.com/security/cve/CVE-2026-53284.html * https://www.suse.com/security/cve/CVE-2026-53384.html * https://www.suse.com/security/cve/CVE-2026-53400.html * https://www.suse.com/security/cve/CVE-2026-63883.html * https://www.suse.com/security/cve/CVE-2026-63890.html * https://www.suse.com/security/cve/CVE-2026-63913.html * https://www.suse.com/security/cve/CVE-2026-63956.html * https://www.suse.com/security/cve/CVE-2026-63963.html * https://www.suse.com/security/cve/CVE-2026-63993.html * https://www.suse.com/security/cve/CVE-2026-64003.html * https://www.suse.com/security/cve/CVE-2026-64009.html * https://www.suse.com/security/cve/CVE-2026-64038.html * https://www.suse.com/security/cve/CVE-2026-64046.html * https://www.suse.com/security/cve/CVE-2026-64103.html * https://www.suse.com/security/cve/CVE-2026-64173.html * https://www.suse.com/security/cve/CVE-2026-64205.html * https://www.suse.com/security/cve/CVE-2026-64210.html * https://www.suse.com/security/cve/CVE-2026-64213.html * https://www.suse.com/security/cve/CVE-2026-64279.html * https://www.suse.com/security/cve/CVE-2026-64283.html * https://www.suse.com/security/cve/CVE-2026-64297.html * https://www.suse.com/security/cve/CVE-2026-64299.html * https://www.suse.com/security/cve/CVE-2026-64319.html * https://www.suse.com/security/cve/CVE-2026-64320.html * https://www.suse.com/security/cve/CVE-2026-64372.html * https://www.suse.com/security/cve/CVE-2026-64373.html * https://www.suse.com/security/cve/CVE-2026-64402.html * https://www.suse.com/security/cve/CVE-2026-64405.html * https://www.suse.com/security/cve/CVE-2026-64425.html * https://www.suse.com/security/cve/CVE-2026-64474.html * https://www.suse.com/security/cve/CVE-2026-64475.html * https://www.suse.com/security/cve/CVE-2026-64476.html * https://www.suse.com/security/cve/CVE-2026-64507.html * https://www.suse.com/security/cve/CVE-2026-64528.html * https://www.suse.com/security/cve/CVE-2026-64542.html * https://www.suse.com/security/cve/CVE-2026-64556.html * https://www.suse.com/security/cve/CVE-2026-64570.html * https://www.suse.com/security/cve/CVE-2026-64579.html * https://www.suse.com/security/cve/CVE-2026-64580.html * https://www.suse.com/security/cve/CVE-2026-64589.html * https://www.suse.com/security/cve/CVE-2026-68096.html * https://www.suse.com/security/cve/CVE-2026-68141.html * https://www.suse.com/security/cve/CVE-2026-68146.html * https://www.suse.com/security/cve/CVE-2026-68148.html * https://www.suse.com/security/cve/CVE-2026-68198.html * https://www.suse.com/security/cve/CVE-2026-68253.html * https://www.suse.com/security/cve/CVE-2026-68258.html * https://www.suse.com/security/cve/CVE-2026-68273.html * https://www.suse.com/security/cve/CVE-2026-68290.html * https://www.suse.com/security/cve/CVE-2026-68294.html * https://www.suse.com/security/cve/CVE-2026-68338.html * https://www.suse.com/security/cve/CVE-2026-68376.html * https://www.suse.com/security/cve/CVE-2026-68441.html * https://www.suse.com/security/cve/CVE-2026-68448.html * https://www.suse.com/security/cve/CVE-2026-68451.html * https://www.suse.com/security/cve/CVE-2026-68452.html * https://www.suse.com/security/cve/CVE-2026-68454.html * https://www.suse.com/security/cve/CVE-2026-68471.html * https://www.suse.com/security/cve/CVE-2026-68477.html * https://www.suse.com/security/cve/CVE-2026-72012.html * https://www.suse.com/security/cve/CVE-2026-72017.html * https://www.suse.com/security/cve/CVE-2026-72019.html * https://www.suse.com/security/cve/CVE-2026-72023.html * https://www.suse.com/security/cve/CVE-2026-72025.html * https://www.suse.com/security/cve/CVE-2026-72045.html * https://www.suse.com/security/cve/CVE-2026-72051.html * https://www.suse.com/security/cve/CVE-2026-72052.html * https://www.suse.com/security/cve/CVE-2026-72053.html * https://www.suse.com/security/cve/CVE-2026-72054.html * https://www.suse.com/security/cve/CVE-2026-72055.html * https://www.suse.com/security/cve/CVE-2026-72061.html * https://www.suse.com/security/cve/CVE-2026-72063.html * https://www.suse.com/security/cve/CVE-2026-72066.html * https://www.suse.com/security/cve/CVE-2026-72085.html * https://www.suse.com/security/cve/CVE-2026-72086.html * https://www.suse.com/security/cve/CVE-2026-72098.html * https://www.suse.com/security/cve/CVE-2026-72102.html * https://www.suse.com/security/cve/CVE-2026-72106.html * https://www.suse.com/security/cve/CVE-2026-72107.html * https://www.suse.com/security/cve/CVE-2026-72108.html * https://www.suse.com/security/cve/CVE-2026-72129.html * https://www.suse.com/security/cve/CVE-2026-72130.html * https://www.suse.com/security/cve/CVE-2026-72135.html * https://www.suse.com/security/cve/CVE-2026-72136.html * https://www.suse.com/security/cve/CVE-2026-72138.html * https://www.suse.com/security/cve/CVE-2026-72157.html * https://www.suse.com/security/cve/CVE-2026-72161.html * https://www.suse.com/security/cve/CVE-2026-72163.html * https://www.suse.com/security/cve/CVE-2026-72164.html * https://www.suse.com/security/cve/CVE-2026-72166.html * https://www.suse.com/security/cve/CVE-2026-72218.html * https://www.suse.com/security/cve/CVE-2026-72219.html * https://www.suse.com/security/cve/CVE-2026-72224.html * https://www.suse.com/security/cve/CVE-2026-72237.html * https://www.suse.com/security/cve/CVE-2026-72242.html * https://www.suse.com/security/cve/CVE-2026-72243.html * https://www.suse.com/security/cve/CVE-2026-72247.html * https://www.suse.com/security/cve/CVE-2026-72256.html * https://www.suse.com/security/cve/CVE-2026-72282.html * https://www.suse.com/security/cve/CVE-2026-72297.html * https://www.suse.com/security/cve/CVE-2026-72299.html * https://www.suse.com/security/cve/CVE-2026-72306.html * https://www.suse.com/security/cve/CVE-2026-72321.html * https://www.suse.com/security/cve/CVE-2026-72322.html * https://www.suse.com/security/cve/CVE-2026-72323.html * https://www.suse.com/security/cve/CVE-2026-72325.html * https://www.suse.com/security/cve/CVE-2026-72330.html * https://www.suse.com/security/cve/CVE-2026-72339.html * https://www.suse.com/security/cve/CVE-2026-72347.html * https://www.suse.com/security/cve/CVE-2026-72348.html * https://www.suse.com/security/cve/CVE-2026-72349.html * https://www.suse.com/security/cve/CVE-2026-72350.html * https://www.suse.com/security/cve/CVE-2026-72351.html * https://www.suse.com/security/cve/CVE-2026-72352.html * https://www.suse.com/security/cve/CVE-2026-72379.html * https://www.suse.com/security/cve/CVE-2026-72383.html * https://www.suse.com/security/cve/CVE-2026-72392.html * https://www.suse.com/security/cve/CVE-2026-72398.html * https://www.suse.com/security/cve/CVE-2026-72399.html * https://www.suse.com/security/cve/CVE-2026-72404.html * https://www.suse.com/security/cve/CVE-2026-72406.html * https://www.suse.com/security/cve/CVE-2026-72413.html * https://www.suse.com/security/cve/CVE-2026-72421.html * https://www.suse.com/security/cve/CVE-2026-72425.html * https://www.suse.com/security/cve/CVE-2026-72433.html * https://www.suse.com/security/cve/CVE-2026-72434.html * https://www.suse.com/security/cve/CVE-2026-72435.html * https://www.suse.com/security/cve/CVE-2026-72436.html * https://www.suse.com/security/cve/CVE-2026-72437.html * https://www.suse.com/security/cve/CVE-2026-72438.html * https://www.suse.com/security/cve/CVE-2026-72439.html * https://www.suse.com/security/cve/CVE-2026-72440.html * https://www.suse.com/security/cve/CVE-2026-72444.html * https://www.suse.com/security/cve/CVE-2026-72447.html * https://www.suse.com/security/cve/CVE-2026-72448.html * https://www.suse.com/security/cve/CVE-2026-72449.html * https://www.suse.com/security/cve/CVE-2026-72450.html * https://www.suse.com/security/cve/CVE-2026-72459.html * https://www.suse.com/security/cve/CVE-2026-72460.html * https://www.suse.com/security/cve/CVE-2026-72487.html * https://www.suse.com/security/cve/CVE-2026-72488.html * https://www.suse.com/security/cve/CVE-2026-74255.html * https://www.suse.com/security/cve/CVE-2026-74256.html * https://www.suse.com/security/cve/CVE-2026-74257.html * https://www.suse.com/security/cve/CVE-2026-74258.html * https://www.suse.com/security/cve/CVE-2026-74261.html * https://www.suse.com/security/cve/CVE-2026-74267.html * https://www.suse.com/security/cve/CVE-2026-74268.html * https://www.suse.com/security/cve/CVE-2026-74270.html * https://www.suse.com/security/cve/CVE-2026-74278.html * https://www.suse.com/security/cve/CVE-2026-74281.html * https://www.suse.com/security/cve/CVE-2026-74282.html * https://www.suse.com/security/cve/CVE-2026-74283.html * https://www.suse.com/security/cve/CVE-2026-74284.html * https://www.suse.com/security/cve/CVE-2026-74288.html * https://www.suse.com/security/cve/CVE-2026-74289.html * https://www.suse.com/security/cve/CVE-2026-74290.html * https://www.suse.com/security/cve/CVE-2026-74302.html * https://www.suse.com/security/cve/CVE-2026-74307.html * https://www.suse.com/security/cve/CVE-2026-74308.html * https://www.suse.com/security/cve/CVE-2026-74310.html * https://www.suse.com/security/cve/CVE-2026-74313.html * https://www.suse.com/security/cve/CVE-2026-74317.html * https://www.suse.com/security/cve/CVE-2026-74330.html * https://www.suse.com/security/cve/CVE-2026-74346.html * https://www.suse.com/security/cve/CVE-2026-74349.html * https://www.suse.com/security/cve/CVE-2026-74356.html * https://www.suse.com/security/cve/CVE-2026-74359.html * https://www.suse.com/security/cve/CVE-2026-74363.html * https://www.suse.com/security/cve/CVE-2026-74365.html * https://www.suse.com/security/cve/CVE-2026-74375.html * https://www.suse.com/security/cve/CVE-2026-74376.html * https://www.suse.com/security/cve/CVE-2026-74377.html * https://www.suse.com/security/cve/CVE-2026-74378.html * https://www.suse.com/security/cve/CVE-2026-74382.html * https://www.suse.com/security/cve/CVE-2026-74384.html * https://www.suse.com/security/cve/CVE-2026-74385.html * https://www.suse.com/security/cve/CVE-2026-74386.html * https://www.suse.com/security/cve/CVE-2026-74388.html * https://www.suse.com/security/cve/CVE-2026-74389.html * https://www.suse.com/security/cve/CVE-2026-74390.html * https://www.suse.com/security/cve/CVE-2026-74391.html * https://www.suse.com/security/cve/CVE-2026-74397.html * https://www.suse.com/security/cve/CVE-2026-74398.html * https://www.suse.com/security/cve/CVE-2026-74406.html * https://www.suse.com/security/cve/CVE-2026-74443.html * https://www.suse.com/security/cve/CVE-2026-74444.html * https://www.suse.com/security/cve/CVE-2026-74450.html * https://www.suse.com/security/cve/CVE-2026-74453.html * https://www.suse.com/security/cve/CVE-2026-74464.html * https://www.suse.com/security/cve/CVE-2026-74465.html * https://www.suse.com/security/cve/CVE-2026-74467.html * https://www.suse.com/security/cve/CVE-2026-74469.html * https://www.suse.com/security/cve/CVE-2026-74471.html * https://www.suse.com/security/cve/CVE-2026-74473.html * https://www.suse.com/security/cve/CVE-2026-74475.html * https://www.suse.com/security/cve/CVE-2026-74476.html * https://www.suse.com/security/cve/CVE-2026-74479.html * https://www.suse.com/security/cve/CVE-2026-74480.html * https://www.suse.com/security/cve/CVE-2026-74485.html * https://www.suse.com/security/cve/CVE-2026-74487.html * https://www.suse.com/security/cve/CVE-2026-74490.html * https://www.suse.com/security/cve/CVE-2026-74492.html * https://www.suse.com/security/cve/CVE-2026-74493.html * https://www.suse.com/security/cve/CVE-2026-74515.html * https://www.suse.com/security/cve/CVE-2026-74523.html * https://www.suse.com/security/cve/CVE-2026-74536.html * https://www.suse.com/security/cve/CVE-2026-74540.html * https://www.suse.com/security/cve/CVE-2026-74541.html * https://www.suse.com/security/cve/CVE-2026-74553.html * https://www.suse.com/security/cve/CVE-2026-74555.html * https://www.suse.com/security/cve/CVE-2026-74557.html * https://www.suse.com/security/cve/CVE-2026-74564.html * https://www.suse.com/security/cve/CVE-2026-74579.html * https://www.suse.com/security/cve/CVE-2026-74580.html * https://www.suse.com/security/cve/CVE-2026-74586.html * https://www.suse.com/security/cve/CVE-2026-74588.html * https://www.suse.com/security/cve/CVE-2026-74589.html * https://www.suse.com/security/cve/CVE-2026-74592.html * https://www.suse.com/security/cve/CVE-2026-74594.html * https://www.suse.com/security/cve/CVE-2026-74595.html * https://www.suse.com/security/cve/CVE-2026-74597.html * https://www.suse.com/security/cve/CVE-2026-74598.html * https://www.suse.com/security/cve/CVE-2026-74600.html * https://www.suse.com/security/cve/CVE-2026-74601.html * https://www.suse.com/security/cve/CVE-2026-74603.html * https://www.suse.com/security/cve/CVE-2026-74608.html * https://www.suse.com/security/cve/CVE-2026-74609.html * https://www.suse.com/security/cve/CVE-2026-74612.html * https://www.suse.com/security/cve/CVE-2026-74615.html * https://www.suse.com/security/cve/CVE-2026-74616.html * https://www.suse.com/security/cve/CVE-2026-74622.html * https://www.suse.com/security/cve/CVE-2026-74625.html * https://www.suse.com/security/cve/CVE-2026-74630.html * https://www.suse.com/security/cve/CVE-2026-74631.html * https://www.suse.com/security/cve/CVE-2026-74632.html * https://www.suse.com/security/cve/CVE-2026-74636.html * https://www.suse.com/security/cve/CVE-2026-74637.html * https://www.suse.com/security/cve/CVE-2026-74638.html * https://www.suse.com/security/cve/CVE-2026-74659.html * https://www.suse.com/security/cve/CVE-2026-74660.html * https://www.suse.com/security/cve/CVE-2026-74663.html * https://www.suse.com/security/cve/CVE-2026-74666.html * https://www.suse.com/security/cve/CVE-2026-74667.html * https://www.suse.com/security/cve/CVE-2026-74671.html * https://www.suse.com/security/cve/CVE-2026-74688.html * https://www.suse.com/security/cve/CVE-2026-74689.html * https://www.suse.com/security/cve/CVE-2026-74696.html * https://www.suse.com/security/cve/CVE-2026-74697.html * https://www.suse.com/security/cve/CVE-2026-74700.html * https://www.suse.com/security/cve/CVE-2026-74701.html * https://www.suse.com/security/cve/CVE-2026-74705.html * https://www.suse.com/security/cve/CVE-2026-74710.html * https://www.suse.com/security/cve/CVE-2026-74713.html * https://www.suse.com/security/cve/CVE-2026-74718.html * https://www.suse.com/security/cve/CVE-2026-74719.html * https://www.suse.com/security/cve/CVE-2026-74725.html * https://www.suse.com/security/cve/CVE-2026-74726.html * https://www.suse.com/security/cve/CVE-2026-74735.html * https://www.suse.com/security/cve/CVE-2026-74737.html * https://www.suse.com/security/cve/CVE-2026-74739.html * https://www.suse.com/security/cve/CVE-2026-74743.html * https://www.suse.com/security/cve/CVE-2026-74744.html * https://www.suse.com/security/cve/CVE-2026-74752.html * https://www.suse.com/security/cve/CVE-2026-80540.html * https://www.suse.com/security/cve/CVE-2026-80557.html * https://www.suse.com/security/cve/CVE-2026-80580.html * https://www.suse.com/security/cve/CVE-2026-80585.html * https://www.suse.com/security/cve/CVE-2026-80586.html * https://www.suse.com/security/cve/CVE-2026-80589.html * https://www.suse.com/security/cve/CVE-2026-80603.html * https://www.suse.com/security/cve/CVE-2026-80613.html * https://www.suse.com/security/cve/CVE-2026-80629.html * https://www.suse.com/security/cve/CVE-2026-80631.html * https://www.suse.com/security/cve/CVE-2026-80646.html * https://www.suse.com/security/cve/CVE-2026-80647.html * https://www.suse.com/security/cve/CVE-2026-80663.html * https://www.suse.com/security/cve/CVE-2026-80664.html * https://www.suse.com/security/cve/CVE-2026-80667.html * https://www.suse.com/security/cve/CVE-2026-80679.html * https://www.suse.com/security/cve/CVE-2026-80681.html * https://www.suse.com/security/cve/CVE-2026-80686.html * https://www.suse.com/security/cve/CVE-2026-80693.html * https://www.suse.com/security/cve/CVE-2026-80714.html * https://www.suse.com/security/cve/CVE-2026-80715.html * https://www.suse.com/security/cve/CVE-2026-80716.html * https://www.suse.com/security/cve/CVE-2026-80722.html * https://www.suse.com/security/cve/CVE-2026-80725.html * https://www.suse.com/security/cve/CVE-2026-80731.html * https://www.suse.com/security/cve/CVE-2026-80737.html * https://www.suse.com/security/cve/CVE-2026-80739.html * https://www.suse.com/security/cve/CVE-2026-80747.html * https://www.suse.com/security/cve/CVE-2026-80756.html * https://www.suse.com/security/cve/CVE-2026-80785.html * https://www.suse.com/security/cve/CVE-2026-80789.html * https://www.suse.com/security/cve/CVE-2026-80793.html * https://www.suse.com/security/cve/CVE-2026-80799.html * https://www.suse.com/security/cve/CVE-2026-80805.html * https://www.suse.com/security/cve/CVE-2026-80836.html * https://www.suse.com/security/cve/CVE-2026-80840.html * https://www.suse.com/security/cve/CVE-2026-80841.html * https://www.suse.com/security/cve/CVE-2026-80842.html * https://www.suse.com/security/cve/CVE-2026-80844.html * https://www.suse.com/security/cve/CVE-2026-80846.html * https://www.suse.com/security/cve/CVE-2026-80847.html * https://www.suse.com/security/cve/CVE-2026-80848.html * https://www.suse.com/security/cve/CVE-2026-80852.html * https://www.suse.com/security/cve/CVE-2026-80863.html * https://www.suse.com/security/cve/CVE-2026-80864.html * https://www.suse.com/security/cve/CVE-2026-80865.html * https://www.suse.com/security/cve/CVE-2026-80880.html * https://www.suse.com/security/cve/CVE-2026-80909.html * https://www.suse.com/security/cve/CVE-2026-80932.html * https://www.suse.com/security/cve/CVE-2026-80976.html * https://www.suse.com/security/cve/CVE-2026-80983.html * https://www.suse.com/security/cve/CVE-2026-81000.html * https://www.suse.com/security/cve/CVE-2026-81001.html * https://www.suse.com/security/cve/CVE-2026-89448.html * https://www.suse.com/security/cve/CVE-2026-89451.html * https://www.suse.com/security/cve/CVE-2026-89477.html * https://www.suse.com/security/cve/CVE-2026-89479.html * https://www.suse.com/security/cve/CVE-2026-89480.html * https://www.suse.com/security/cve/CVE-2026-89481.html * https://www.suse.com/security/cve/CVE-2026-89482.html * https://www.suse.com/security/cve/CVE-2026-89485.html * https://www.suse.com/security/cve/CVE-2026-89508.html * https://www.suse.com/security/cve/CVE-2026-89510.html * https://www.suse.com/security/cve/CVE-2026-89511.html * https://www.suse.com/security/cve/CVE-2026-89525.html * https://www.suse.com/security/cve/CVE-2026-89531.html * https://www.suse.com/security/cve/CVE-2026-89532.html * https://www.suse.com/security/cve/CVE-2026-89533.html * https://www.suse.com/security/cve/CVE-2026-89536.html * https://www.suse.com/security/cve/CVE-2026-89538.html * https://www.suse.com/security/cve/CVE-2026-89539.html * https://www.suse.com/security/cve/CVE-2026-89540.html * https://www.suse.com/security/cve/CVE-2026-89541.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89544.html * https://www.suse.com/security/cve/CVE-2026-89547.html * https://www.suse.com/security/cve/CVE-2026-89548.html * https://www.suse.com/security/cve/CVE-2026-89550.html * https://www.suse.com/security/cve/CVE-2026-89551.html * https://www.suse.com/security/cve/CVE-2026-89564.html * https://www.suse.com/security/cve/CVE-2026-89569.html * https://www.suse.com/security/cve/CVE-2026-89580.html * https://www.suse.com/security/cve/CVE-2026-89603.html * https://www.suse.com/security/cve/CVE-2026-89609.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89638.html * https://www.suse.com/security/cve/CVE-2026-89644.html * https://www.suse.com/security/cve/CVE-2026-89662.html * https://www.suse.com/security/cve/CVE-2026-89663.html * https://www.suse.com/security/cve/CVE-2026-89665.html * https://www.suse.com/security/cve/CVE-2026-89671.html * https://www.suse.com/security/cve/CVE-2026-89672.html * https://www.suse.com/security/cve/CVE-2026-89673.html * https://www.suse.com/security/cve/CVE-2026-89674.html * https://www.suse.com/security/cve/CVE-2026-89680.html * https://www.suse.com/security/cve/CVE-2026-89684.html * https://www.suse.com/security/cve/CVE-2026-89686.html * https://www.suse.com/security/cve/CVE-2026-89694.html * https://www.suse.com/security/cve/CVE-2026-89696.html * https://www.suse.com/security/cve/CVE-2026-89697.html * https://www.suse.com/security/cve/CVE-2026-89699.html * https://www.suse.com/security/cve/CVE-2026-89702.html * https://www.suse.com/security/cve/CVE-2026-89704.html * https://www.suse.com/security/cve/CVE-2026-89707.html * https://www.suse.com/security/cve/CVE-2026-89710.html * https://www.suse.com/security/cve/CVE-2026-89712.html * https://www.suse.com/security/cve/CVE-2026-89713.html * https://www.suse.com/security/cve/CVE-2026-89784.html * https://www.suse.com/security/cve/CVE-2026-89789.html * https://www.suse.com/security/cve/CVE-2026-89899.html * https://www.suse.com/security/cve/CVE-2026-89912.html * https://www.suse.com/security/cve/CVE-2026-89913.html * https://www.suse.com/security/cve/CVE-2026-89929.html * https://www.suse.com/security/cve/CVE-2026-89930.html * https://www.suse.com/security/cve/CVE-2026-89931.html * https://www.suse.com/security/cve/CVE-2026-89968.html * https://www.suse.com/security/cve/CVE-2026-89970.html * https://www.suse.com/security/cve/CVE-2026-89984.html * https://www.suse.com/security/cve/CVE-2026-90003.html * https://www.suse.com/security/cve/CVE-2026-90074.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-90097.html * https://www.suse.com/security/cve/CVE-2026-90104.html * https://www.suse.com/security/cve/CVE-2026-90149.html * https://www.suse.com/security/cve/CVE-2026-90151.html * https://www.suse.com/security/cve/CVE-2026-90182.html * https://www.suse.com/security/cve/CVE-2026-90183.html * https://www.suse.com/security/cve/CVE-2026-90198.html * https://www.suse.com/security/cve/CVE-2026-90203.html * https://www.suse.com/security/cve/CVE-2026-90218.html * https://www.suse.com/security/cve/CVE-2026-90228.html * https://www.suse.com/security/cve/CVE-2026-90255.html * https://www.suse.com/security/cve/CVE-2026-90259.html * https://www.suse.com/security/cve/CVE-2026-90263.html * https://www.suse.com/security/cve/CVE-2026-90265.html * https://www.suse.com/security/cve/CVE-2026-90292.html * https://www.suse.com/security/cve/CVE-2026-90293.html * https://www.suse.com/security/cve/CVE-2026-90294.html * https://www.suse.com/security/cve/CVE-2026-90307.html * https://www.suse.com/security/cve/CVE-2026-90308.html * https://www.suse.com/security/cve/CVE-2026-90309.html * https://www.suse.com/security/cve/CVE-2026-90358.html * https://www.suse.com/security/cve/CVE-2026-90388.html * https://www.suse.com/security/cve/CVE-2026-90413.html * https://www.suse.com/security/cve/CVE-2026-90414.html * https://www.suse.com/security/cve/CVE-2026-90415.html * https://www.suse.com/security/cve/CVE-2026-90417.html * https://www.suse.com/security/cve/CVE-2026-90434.html * https://www.suse.com/security/cve/CVE-2026-92495.html * https://www.suse.com/security/cve/CVE-2026-92500.html * https://www.suse.com/security/cve/CVE-2026-92503.html * https://www.suse.com/security/cve/CVE-2026-92507.html * https://www.suse.com/security/cve/CVE-2026-92508.html * https://www.suse.com/security/cve/CVE-2026-92509.html * https://www.suse.com/security/cve/CVE-2026-92510.html * https://www.suse.com/security/cve/CVE-2026-92511.html * https://www.suse.com/security/cve/CVE-2026-92512.html * https://www.suse.com/security/cve/CVE-2026-92514.html * https://www.suse.com/security/cve/CVE-2026-92523.html * https://www.suse.com/security/cve/CVE-2026-92525.html * https://www.suse.com/security/cve/CVE-2026-93037.html * https://www.suse.com/security/cve/CVE-2026-93102.html * https://www.suse.com/security/cve/CVE-2026-93103.html * https://www.suse.com/security/cve/CVE-2026-93104.html * https://www.suse.com/security/cve/CVE-2026-93107.html * https://www.suse.com/security/cve/CVE-2026-93108.html * https://www.suse.com/security/cve/CVE-2026-93109.html * https://www.suse.com/security/cve/CVE-2026-93110.html * https://www.suse.com/security/cve/CVE-2026-93154.html * https://www.suse.com/security/cve/CVE-2026-93207.html * https://www.suse.com/security/cve/CVE-2026-93212.html * https://www.suse.com/security/cve/CVE-2026-93264.html * https://www.suse.com/security/cve/CVE-2026-93269.html * https://www.suse.com/security/cve/CVE-2026-93782.html * https://www.suse.com/security/cve/CVE-2026-93794.html * https://www.suse.com/security/cve/CVE-2026-93810.html * https://www.suse.com/security/cve/CVE-2026-93813.html * https://www.suse.com/security/cve/CVE-2026-93826.html * https://www.suse.com/security/cve/CVE-2026-93829.html * https://www.suse.com/security/cve/CVE-2026-97421.html * https://www.suse.com/security/cve/CVE-2026-97477.html * https://www.suse.com/security/cve/CVE-2026-97505.html * https://www.suse.com/security/cve/CVE-2026-97557.html * https://www.suse.com/security/cve/CVE-2026-97934.html * https://www.suse.com/security/cve/CVE-2026-97940.html * https://www.suse.com/security/cve/CVE-2026-97950.html * https://www.suse.com/security/cve/CVE-2026-98003.html * https://www.suse.com/security/cve/CVE-2026-98080.html * https://www.suse.com/security/cve/CVE-2026-98091.html * https://www.suse.com/security/cve/CVE-2026-98164.html * https://bugzilla.suse.com/show_bug.cgi?id=1222538 * https://bugzilla.suse.com/show_bug.cgi?id=1254408 * https://bugzilla.suse.com/show_bug.cgi?id=1258298 * https://bugzilla.suse.com/show_bug.cgi?id=1260474 * https://bugzilla.suse.com/show_bug.cgi?id=1263017 * https://bugzilla.suse.com/show_bug.cgi?id=1263602 * https://bugzilla.suse.com/show_bug.cgi?id=1263865 * https://bugzilla.suse.com/show_bug.cgi?id=1264747 * https://bugzilla.suse.com/show_bug.cgi?id=1264807 * https://bugzilla.suse.com/show_bug.cgi?id=1266410 * https://bugzilla.suse.com/show_bug.cgi?id=1266735 * https://bugzilla.suse.com/show_bug.cgi?id=1266848 * https://bugzilla.suse.com/show_bug.cgi?id=1267373 * https://bugzilla.suse.com/show_bug.cgi?id=1267464 * https://bugzilla.suse.com/show_bug.cgi?id=1267564 * https://bugzilla.suse.com/show_bug.cgi?id=1267648 * https://bugzilla.suse.com/show_bug.cgi?id=1267985 * https://bugzilla.suse.com/show_bug.cgi?id=1269000 * https://bugzilla.suse.com/show_bug.cgi?id=1269685 * https://bugzilla.suse.com/show_bug.cgi?id=1269816 * https://bugzilla.suse.com/show_bug.cgi?id=1271817 * https://bugzilla.suse.com/show_bug.cgi?id=1271906 * https://bugzilla.suse.com/show_bug.cgi?id=1272145 * https://bugzilla.suse.com/show_bug.cgi?id=1272215 * https://bugzilla.suse.com/show_bug.cgi?id=1272426 * https://bugzilla.suse.com/show_bug.cgi?id=1272471 * https://bugzilla.suse.com/show_bug.cgi?id=1272473 * https://bugzilla.suse.com/show_bug.cgi?id=1272572 * https://bugzilla.suse.com/show_bug.cgi?id=1272793 * https://bugzilla.suse.com/show_bug.cgi?id=1272847 * https://bugzilla.suse.com/show_bug.cgi?id=1272890 * https://bugzilla.suse.com/show_bug.cgi?id=1273059 * https://bugzilla.suse.com/show_bug.cgi?id=1273251 * https://bugzilla.suse.com/show_bug.cgi?id=1273258 * https://bugzilla.suse.com/show_bug.cgi?id=1273309 * https://bugzilla.suse.com/show_bug.cgi?id=1273339 * https://bugzilla.suse.com/show_bug.cgi?id=1273420 * https://bugzilla.suse.com/show_bug.cgi?id=1273512 * https://bugzilla.suse.com/show_bug.cgi?id=1273522 * https://bugzilla.suse.com/show_bug.cgi?id=1273750 * https://bugzilla.suse.com/show_bug.cgi?id=1273759 * https://bugzilla.suse.com/show_bug.cgi?id=1273776 * https://bugzilla.suse.com/show_bug.cgi?id=1273782 * https://bugzilla.suse.com/show_bug.cgi?id=1273870 * https://bugzilla.suse.com/show_bug.cgi?id=1273879 * https://bugzilla.suse.com/show_bug.cgi?id=1273889 * https://bugzilla.suse.com/show_bug.cgi?id=1273899 * https://bugzilla.suse.com/show_bug.cgi?id=1273938 * https://bugzilla.suse.com/show_bug.cgi?id=1273953 * https://bugzilla.suse.com/show_bug.cgi?id=1273976 * https://bugzilla.suse.com/show_bug.cgi?id=1273999 * https://bugzilla.suse.com/show_bug.cgi?id=1274010 * https://bugzilla.suse.com/show_bug.cgi?id=1274036 * https://bugzilla.suse.com/show_bug.cgi?id=1274037 * https://bugzilla.suse.com/show_bug.cgi?id=1274245 * https://bugzilla.suse.com/show_bug.cgi?id=1274316 * https://bugzilla.suse.com/show_bug.cgi?id=1274319 * https://bugzilla.suse.com/show_bug.cgi?id=1274494 * https://bugzilla.suse.com/show_bug.cgi?id=1274637 * https://bugzilla.suse.com/show_bug.cgi?id=1274730 * https://bugzilla.suse.com/show_bug.cgi?id=1274776 * https://bugzilla.suse.com/show_bug.cgi?id=1274803 * https://bugzilla.suse.com/show_bug.cgi?id=1274836 * https://bugzilla.suse.com/show_bug.cgi?id=1274838 * https://bugzilla.suse.com/show_bug.cgi?id=1274890 * https://bugzilla.suse.com/show_bug.cgi?id=1275092 * https://bugzilla.suse.com/show_bug.cgi?id=1275094 * https://bugzilla.suse.com/show_bug.cgi?id=1275129 * https://bugzilla.suse.com/show_bug.cgi?id=1275156 * https://bugzilla.suse.com/show_bug.cgi?id=1275455 * https://bugzilla.suse.com/show_bug.cgi?id=1275495 * https://bugzilla.suse.com/show_bug.cgi?id=1275542 * https://bugzilla.suse.com/show_bug.cgi?id=1275543 * https://bugzilla.suse.com/show_bug.cgi?id=1275545 * https://bugzilla.suse.com/show_bug.cgi?id=1275549 * https://bugzilla.suse.com/show_bug.cgi?id=1275559 * https://bugzilla.suse.com/show_bug.cgi?id=1275567 * https://bugzilla.suse.com/show_bug.cgi?id=1275588 * https://bugzilla.suse.com/show_bug.cgi?id=1275681 * https://bugzilla.suse.com/show_bug.cgi?id=1275684 * https://bugzilla.suse.com/show_bug.cgi?id=1275685 * https://bugzilla.suse.com/show_bug.cgi?id=1275690 * https://bugzilla.suse.com/show_bug.cgi?id=1275694 * https://bugzilla.suse.com/show_bug.cgi?id=1275799 * https://bugzilla.suse.com/show_bug.cgi?id=1275802 * https://bugzilla.suse.com/show_bug.cgi?id=1275866 * https://bugzilla.suse.com/show_bug.cgi?id=1275924 * https://bugzilla.suse.com/show_bug.cgi?id=1275953 * https://bugzilla.suse.com/show_bug.cgi?id=1275972 * https://bugzilla.suse.com/show_bug.cgi?id=1275977 * https://bugzilla.suse.com/show_bug.cgi?id=1275985 * https://bugzilla.suse.com/show_bug.cgi?id=1276006 * https://bugzilla.suse.com/show_bug.cgi?id=1276007 * https://bugzilla.suse.com/show_bug.cgi?id=1276009 * https://bugzilla.suse.com/show_bug.cgi?id=1276287 * https://bugzilla.suse.com/show_bug.cgi?id=1276295 * https://bugzilla.suse.com/show_bug.cgi?id=1276337 * https://bugzilla.suse.com/show_bug.cgi?id=1276338 * https://bugzilla.suse.com/show_bug.cgi?id=1276339 * https://bugzilla.suse.com/show_bug.cgi?id=1276340 * https://bugzilla.suse.com/show_bug.cgi?id=1276341 * https://bugzilla.suse.com/show_bug.cgi?id=1276349 * https://bugzilla.suse.com/show_bug.cgi?id=1276352 * https://bugzilla.suse.com/show_bug.cgi?id=1276353 * https://bugzilla.suse.com/show_bug.cgi?id=1276354 * https://bugzilla.suse.com/show_bug.cgi?id=1276381 * https://bugzilla.suse.com/show_bug.cgi?id=1276388 * https://bugzilla.suse.com/show_bug.cgi?id=1276395 * https://bugzilla.suse.com/show_bug.cgi?id=1276445 * https://bugzilla.suse.com/show_bug.cgi?id=1276460 * https://bugzilla.suse.com/show_bug.cgi?id=1276461 * https://bugzilla.suse.com/show_bug.cgi?id=1276462 * https://bugzilla.suse.com/show_bug.cgi?id=1276468 * https://bugzilla.suse.com/show_bug.cgi?id=1276473 * https://bugzilla.suse.com/show_bug.cgi?id=1276474 * https://bugzilla.suse.com/show_bug.cgi?id=1276475 * https://bugzilla.suse.com/show_bug.cgi?id=1276504 * https://bugzilla.suse.com/show_bug.cgi?id=1276508 * https://bugzilla.suse.com/show_bug.cgi?id=1276512 * https://bugzilla.suse.com/show_bug.cgi?id=1276519 * https://bugzilla.suse.com/show_bug.cgi?id=1276528 * https://bugzilla.suse.com/show_bug.cgi?id=1276532 * https://bugzilla.suse.com/show_bug.cgi?id=1276535 * https://bugzilla.suse.com/show_bug.cgi?id=1276538 * https://bugzilla.suse.com/show_bug.cgi?id=1276547 * https://bugzilla.suse.com/show_bug.cgi?id=1276553 * https://bugzilla.suse.com/show_bug.cgi?id=1276563 * https://bugzilla.suse.com/show_bug.cgi?id=1276565 * https://bugzilla.suse.com/show_bug.cgi?id=1276570 * https://bugzilla.suse.com/show_bug.cgi?id=1276572 * https://bugzilla.suse.com/show_bug.cgi?id=1276573 * https://bugzilla.suse.com/show_bug.cgi?id=1276579 * https://bugzilla.suse.com/show_bug.cgi?id=1276766 * https://bugzilla.suse.com/show_bug.cgi?id=1276767 * https://bugzilla.suse.com/show_bug.cgi?id=1276783 * https://bugzilla.suse.com/show_bug.cgi?id=1276793 * https://bugzilla.suse.com/show_bug.cgi?id=1276801 * https://bugzilla.suse.com/show_bug.cgi?id=1276803 * https://bugzilla.suse.com/show_bug.cgi?id=1276814 * https://bugzilla.suse.com/show_bug.cgi?id=1276818 * https://bugzilla.suse.com/show_bug.cgi?id=1276821 * https://bugzilla.suse.com/show_bug.cgi?id=1276840 * https://bugzilla.suse.com/show_bug.cgi?id=1276865 * https://bugzilla.suse.com/show_bug.cgi?id=1276866 * https://bugzilla.suse.com/show_bug.cgi?id=1276876 * https://bugzilla.suse.com/show_bug.cgi?id=1276880 * https://bugzilla.suse.com/show_bug.cgi?id=1276891 * https://bugzilla.suse.com/show_bug.cgi?id=1276905 * https://bugzilla.suse.com/show_bug.cgi?id=1276921 * https://bugzilla.suse.com/show_bug.cgi?id=1276922 * https://bugzilla.suse.com/show_bug.cgi?id=1276923 * https://bugzilla.suse.com/show_bug.cgi?id=1276930 * https://bugzilla.suse.com/show_bug.cgi?id=1277023 * https://bugzilla.suse.com/show_bug.cgi?id=1277030 * https://bugzilla.suse.com/show_bug.cgi?id=1277032 * https://bugzilla.suse.com/show_bug.cgi?id=1277036 * https://bugzilla.suse.com/show_bug.cgi?id=1277070 * https://bugzilla.suse.com/show_bug.cgi?id=1277078 * https://bugzilla.suse.com/show_bug.cgi?id=1277092 * https://bugzilla.suse.com/show_bug.cgi?id=1277098 * https://bugzilla.suse.com/show_bug.cgi?id=1277108 * https://bugzilla.suse.com/show_bug.cgi?id=1277109 * https://bugzilla.suse.com/show_bug.cgi?id=1277114 * https://bugzilla.suse.com/show_bug.cgi?id=1277115 * https://bugzilla.suse.com/show_bug.cgi?id=1277120 * https://bugzilla.suse.com/show_bug.cgi?id=1277122 * https://bugzilla.suse.com/show_bug.cgi?id=1277128 * https://bugzilla.suse.com/show_bug.cgi?id=1277129 * https://bugzilla.suse.com/show_bug.cgi?id=1277143 * https://bugzilla.suse.com/show_bug.cgi?id=1277148 * https://bugzilla.suse.com/show_bug.cgi?id=1277149 * https://bugzilla.suse.com/show_bug.cgi?id=1277179 * https://bugzilla.suse.com/show_bug.cgi?id=1277215 * https://bugzilla.suse.com/show_bug.cgi?id=1277217 * https://bugzilla.suse.com/show_bug.cgi?id=1277218 * https://bugzilla.suse.com/show_bug.cgi?id=1277229 * https://bugzilla.suse.com/show_bug.cgi?id=1277231 * https://bugzilla.suse.com/show_bug.cgi?id=1277233 * https://bugzilla.suse.com/show_bug.cgi?id=1277235 * https://bugzilla.suse.com/show_bug.cgi?id=1277245 * https://bugzilla.suse.com/show_bug.cgi?id=1277249 * https://bugzilla.suse.com/show_bug.cgi?id=1277254 * https://bugzilla.suse.com/show_bug.cgi?id=1277268 * https://bugzilla.suse.com/show_bug.cgi?id=1277272 * https://bugzilla.suse.com/show_bug.cgi?id=1277296 * https://bugzilla.suse.com/show_bug.cgi?id=1277308 * https://bugzilla.suse.com/show_bug.cgi?id=1277314 * https://bugzilla.suse.com/show_bug.cgi?id=1277321 * https://bugzilla.suse.com/show_bug.cgi?id=1277328 * https://bugzilla.suse.com/show_bug.cgi?id=1277335 * https://bugzilla.suse.com/show_bug.cgi?id=1277342 * https://bugzilla.suse.com/show_bug.cgi?id=1277349 * https://bugzilla.suse.com/show_bug.cgi?id=1277350 * https://bugzilla.suse.com/show_bug.cgi?id=1277371 * https://bugzilla.suse.com/show_bug.cgi?id=1277372 * https://bugzilla.suse.com/show_bug.cgi?id=1277374 * https://bugzilla.suse.com/show_bug.cgi?id=1277392 * https://bugzilla.suse.com/show_bug.cgi?id=1277396 * https://bugzilla.suse.com/show_bug.cgi?id=1277401 * https://bugzilla.suse.com/show_bug.cgi?id=1277405 * https://bugzilla.suse.com/show_bug.cgi?id=1277410 * https://bugzilla.suse.com/show_bug.cgi?id=1277452 * https://bugzilla.suse.com/show_bug.cgi?id=1277489 * https://bugzilla.suse.com/show_bug.cgi?id=1277493 * https://bugzilla.suse.com/show_bug.cgi?id=1277505 * https://bugzilla.suse.com/show_bug.cgi?id=1277513 * https://bugzilla.suse.com/show_bug.cgi?id=1277544 * https://bugzilla.suse.com/show_bug.cgi?id=1277553 * https://bugzilla.suse.com/show_bug.cgi?id=1277555 * https://bugzilla.suse.com/show_bug.cgi?id=1277556 * https://bugzilla.suse.com/show_bug.cgi?id=1277557 * https://bugzilla.suse.com/show_bug.cgi?id=1277558 * https://bugzilla.suse.com/show_bug.cgi?id=1277561 * https://bugzilla.suse.com/show_bug.cgi?id=1277571 * https://bugzilla.suse.com/show_bug.cgi?id=1277574 * https://bugzilla.suse.com/show_bug.cgi?id=1277590 * https://bugzilla.suse.com/show_bug.cgi?id=1277615 * https://bugzilla.suse.com/show_bug.cgi?id=1277626 * https://bugzilla.suse.com/show_bug.cgi?id=1277640 * https://bugzilla.suse.com/show_bug.cgi?id=1277649 * https://bugzilla.suse.com/show_bug.cgi?id=1277655 * https://bugzilla.suse.com/show_bug.cgi?id=1277656 * https://bugzilla.suse.com/show_bug.cgi?id=1277662 * https://bugzilla.suse.com/show_bug.cgi?id=1277674 * https://bugzilla.suse.com/show_bug.cgi?id=1277705 * https://bugzilla.suse.com/show_bug.cgi?id=1277728 * https://bugzilla.suse.com/show_bug.cgi?id=1277738 * https://bugzilla.suse.com/show_bug.cgi?id=1277748 * https://bugzilla.suse.com/show_bug.cgi?id=1277761 * https://bugzilla.suse.com/show_bug.cgi?id=1277764 * https://bugzilla.suse.com/show_bug.cgi?id=1277766 * https://bugzilla.suse.com/show_bug.cgi?id=1277781 * https://bugzilla.suse.com/show_bug.cgi?id=1277783 * https://bugzilla.suse.com/show_bug.cgi?id=1277784 * https://bugzilla.suse.com/show_bug.cgi?id=1277792 * https://bugzilla.suse.com/show_bug.cgi?id=1277796 * https://bugzilla.suse.com/show_bug.cgi?id=1277801 * https://bugzilla.suse.com/show_bug.cgi?id=1277805 * https://bugzilla.suse.com/show_bug.cgi?id=1277813 * https://bugzilla.suse.com/show_bug.cgi?id=1277818 * https://bugzilla.suse.com/show_bug.cgi?id=1277820 * https://bugzilla.suse.com/show_bug.cgi?id=1277822 * https://bugzilla.suse.com/show_bug.cgi?id=1277823 * https://bugzilla.suse.com/show_bug.cgi?id=1277837 * https://bugzilla.suse.com/show_bug.cgi?id=1277840 * https://bugzilla.suse.com/show_bug.cgi?id=1277843 * https://bugzilla.suse.com/show_bug.cgi?id=1277857 * https://bugzilla.suse.com/show_bug.cgi?id=1277860 * https://bugzilla.suse.com/show_bug.cgi?id=1277862 * https://bugzilla.suse.com/show_bug.cgi?id=1277874 * https://bugzilla.suse.com/show_bug.cgi?id=1277876 * https://bugzilla.suse.com/show_bug.cgi?id=1277885 * https://bugzilla.suse.com/show_bug.cgi?id=1277892 * https://bugzilla.suse.com/show_bug.cgi?id=1277896 * https://bugzilla.suse.com/show_bug.cgi?id=1277897 * https://bugzilla.suse.com/show_bug.cgi?id=1277898 * https://bugzilla.suse.com/show_bug.cgi?id=1277900 * https://bugzilla.suse.com/show_bug.cgi?id=1277901 * https://bugzilla.suse.com/show_bug.cgi?id=1277904 * https://bugzilla.suse.com/show_bug.cgi?id=1277906 * https://bugzilla.suse.com/show_bug.cgi?id=1277908 * https://bugzilla.suse.com/show_bug.cgi?id=1277910 * https://bugzilla.suse.com/show_bug.cgi?id=1277915 * https://bugzilla.suse.com/show_bug.cgi?id=1277918 * https://bugzilla.suse.com/show_bug.cgi?id=1278031 * https://bugzilla.suse.com/show_bug.cgi?id=1278035 * https://bugzilla.suse.com/show_bug.cgi?id=1278053 * https://bugzilla.suse.com/show_bug.cgi?id=1278054 * https://bugzilla.suse.com/show_bug.cgi?id=1278056 * https://bugzilla.suse.com/show_bug.cgi?id=1278063 * https://bugzilla.suse.com/show_bug.cgi?id=1278067 * https://bugzilla.suse.com/show_bug.cgi?id=1278070 * https://bugzilla.suse.com/show_bug.cgi?id=1278087 * https://bugzilla.suse.com/show_bug.cgi?id=1278088 * https://bugzilla.suse.com/show_bug.cgi?id=1278091 * https://bugzilla.suse.com/show_bug.cgi?id=1278094 * https://bugzilla.suse.com/show_bug.cgi?id=1278098 * https://bugzilla.suse.com/show_bug.cgi?id=1278100 * https://bugzilla.suse.com/show_bug.cgi?id=1278108 * https://bugzilla.suse.com/show_bug.cgi?id=1278113 * https://bugzilla.suse.com/show_bug.cgi?id=1278132 * https://bugzilla.suse.com/show_bug.cgi?id=1278155 * https://bugzilla.suse.com/show_bug.cgi?id=1278178 * https://bugzilla.suse.com/show_bug.cgi?id=1278180 * https://bugzilla.suse.com/show_bug.cgi?id=1278191 * https://bugzilla.suse.com/show_bug.cgi?id=1278195 * https://bugzilla.suse.com/show_bug.cgi?id=1278199 * https://bugzilla.suse.com/show_bug.cgi?id=1278205 * https://bugzilla.suse.com/show_bug.cgi?id=1278210 * https://bugzilla.suse.com/show_bug.cgi?id=1278211 * https://bugzilla.suse.com/show_bug.cgi?id=1278216 * https://bugzilla.suse.com/show_bug.cgi?id=1278225 * https://bugzilla.suse.com/show_bug.cgi?id=1278233 * https://bugzilla.suse.com/show_bug.cgi?id=1278236 * https://bugzilla.suse.com/show_bug.cgi?id=1278240 * https://bugzilla.suse.com/show_bug.cgi?id=1278245 * https://bugzilla.suse.com/show_bug.cgi?id=1278247 * https://bugzilla.suse.com/show_bug.cgi?id=1278253 * https://bugzilla.suse.com/show_bug.cgi?id=1278255 * https://bugzilla.suse.com/show_bug.cgi?id=1278293 * https://bugzilla.suse.com/show_bug.cgi?id=1278294 * https://bugzilla.suse.com/show_bug.cgi?id=1278311 * https://bugzilla.suse.com/show_bug.cgi?id=1278314 * https://bugzilla.suse.com/show_bug.cgi?id=1278315 * https://bugzilla.suse.com/show_bug.cgi?id=1278324 * https://bugzilla.suse.com/show_bug.cgi?id=1278331 * https://bugzilla.suse.com/show_bug.cgi?id=1278335 * https://bugzilla.suse.com/show_bug.cgi?id=1278395 * https://bugzilla.suse.com/show_bug.cgi?id=1278416 * https://bugzilla.suse.com/show_bug.cgi?id=1278708 * https://bugzilla.suse.com/show_bug.cgi?id=1278716 * https://bugzilla.suse.com/show_bug.cgi?id=1278733 * https://bugzilla.suse.com/show_bug.cgi?id=1279422 * https://bugzilla.suse.com/show_bug.cgi?id=1279487 * https://bugzilla.suse.com/show_bug.cgi?id=1279497 * https://bugzilla.suse.com/show_bug.cgi?id=1279525 * https://bugzilla.suse.com/show_bug.cgi?id=1279527 * https://bugzilla.suse.com/show_bug.cgi?id=1279532 * https://bugzilla.suse.com/show_bug.cgi?id=1279535 * https://bugzilla.suse.com/show_bug.cgi?id=1279536 * https://bugzilla.suse.com/show_bug.cgi?id=1279580 * https://bugzilla.suse.com/show_bug.cgi?id=1279581 * https://bugzilla.suse.com/show_bug.cgi?id=1279619 * https://bugzilla.suse.com/show_bug.cgi?id=1279621 * https://bugzilla.suse.com/show_bug.cgi?id=1279786 * https://bugzilla.suse.com/show_bug.cgi?id=1279799 * https://bugzilla.suse.com/show_bug.cgi?id=1279811 * https://bugzilla.suse.com/show_bug.cgi?id=1279813 * https://bugzilla.suse.com/show_bug.cgi?id=1279819 * https://bugzilla.suse.com/show_bug.cgi?id=1279835 * https://bugzilla.suse.com/show_bug.cgi?id=1279847 * https://bugzilla.suse.com/show_bug.cgi?id=1279850 * https://bugzilla.suse.com/show_bug.cgi?id=1279875 * https://bugzilla.suse.com/show_bug.cgi?id=1279878 * https://bugzilla.suse.com/show_bug.cgi?id=1279888 * https://bugzilla.suse.com/show_bug.cgi?id=1280139 * https://bugzilla.suse.com/show_bug.cgi?id=1280143 * https://bugzilla.suse.com/show_bug.cgi?id=1280146 * https://bugzilla.suse.com/show_bug.cgi?id=1280148 * https://bugzilla.suse.com/show_bug.cgi?id=1280151 * https://bugzilla.suse.com/show_bug.cgi?id=1280178 * https://bugzilla.suse.com/show_bug.cgi?id=1280184 * https://bugzilla.suse.com/show_bug.cgi?id=1280206 * https://bugzilla.suse.com/show_bug.cgi?id=1280235 * https://bugzilla.suse.com/show_bug.cgi?id=1280237 * https://bugzilla.suse.com/show_bug.cgi?id=1280243 * https://bugzilla.suse.com/show_bug.cgi?id=1280252 * https://bugzilla.suse.com/show_bug.cgi?id=1280263 * https://bugzilla.suse.com/show_bug.cgi?id=1280296 * https://bugzilla.suse.com/show_bug.cgi?id=1280298 * https://bugzilla.suse.com/show_bug.cgi?id=1280338 * https://bugzilla.suse.com/show_bug.cgi?id=1280350 * https://bugzilla.suse.com/show_bug.cgi?id=1280375 * https://bugzilla.suse.com/show_bug.cgi?id=1280379 * https://bugzilla.suse.com/show_bug.cgi?id=1280383 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280388 * https://bugzilla.suse.com/show_bug.cgi?id=1280449 * https://bugzilla.suse.com/show_bug.cgi?id=1280451 * https://bugzilla.suse.com/show_bug.cgi?id=1280455 * https://bugzilla.suse.com/show_bug.cgi?id=1280456 * https://bugzilla.suse.com/show_bug.cgi?id=1280468 * https://bugzilla.suse.com/show_bug.cgi?id=1280487 * https://bugzilla.suse.com/show_bug.cgi?id=1280490 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280508 * https://bugzilla.suse.com/show_bug.cgi?id=1280509 * https://bugzilla.suse.com/show_bug.cgi?id=1280518 * https://bugzilla.suse.com/show_bug.cgi?id=1280544 * https://bugzilla.suse.com/show_bug.cgi?id=1280546 * https://bugzilla.suse.com/show_bug.cgi?id=1280548 * https://bugzilla.suse.com/show_bug.cgi?id=1280551 * https://bugzilla.suse.com/show_bug.cgi?id=1280577 * https://bugzilla.suse.com/show_bug.cgi?id=1280711 * https://bugzilla.suse.com/show_bug.cgi?id=1280716 * https://bugzilla.suse.com/show_bug.cgi?id=1280717 * https://bugzilla.suse.com/show_bug.cgi?id=1280719 * https://bugzilla.suse.com/show_bug.cgi?id=1280726 * https://bugzilla.suse.com/show_bug.cgi?id=1280727 * https://bugzilla.suse.com/show_bug.cgi?id=1280733 * https://bugzilla.suse.com/show_bug.cgi?id=1280750 * https://bugzilla.suse.com/show_bug.cgi?id=1280758 * https://bugzilla.suse.com/show_bug.cgi?id=1280786 * https://bugzilla.suse.com/show_bug.cgi?id=1280797 * https://bugzilla.suse.com/show_bug.cgi?id=1280870 * https://bugzilla.suse.com/show_bug.cgi?id=1280872 * https://bugzilla.suse.com/show_bug.cgi?id=1280923 * https://bugzilla.suse.com/show_bug.cgi?id=1280985 * https://bugzilla.suse.com/show_bug.cgi?id=1280993 * https://bugzilla.suse.com/show_bug.cgi?id=1281010 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281046 * https://bugzilla.suse.com/show_bug.cgi?id=1281054 * https://bugzilla.suse.com/show_bug.cgi?id=1281057 * https://bugzilla.suse.com/show_bug.cgi?id=1281077 * https://bugzilla.suse.com/show_bug.cgi?id=1281085 * https://bugzilla.suse.com/show_bug.cgi?id=1281201 * https://bugzilla.suse.com/show_bug.cgi?id=1281202 * https://bugzilla.suse.com/show_bug.cgi?id=1281224 * https://bugzilla.suse.com/show_bug.cgi?id=1281226 * https://bugzilla.suse.com/show_bug.cgi?id=1281229 * https://bugzilla.suse.com/show_bug.cgi?id=1281231 * https://bugzilla.suse.com/show_bug.cgi?id=1281273 * https://bugzilla.suse.com/show_bug.cgi?id=1281295 * https://bugzilla.suse.com/show_bug.cgi?id=1281358 * https://bugzilla.suse.com/show_bug.cgi?id=1281359 * https://bugzilla.suse.com/show_bug.cgi?id=1281379 * https://bugzilla.suse.com/show_bug.cgi?id=1281383 * https://bugzilla.suse.com/show_bug.cgi?id=1281387 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1281399 * https://bugzilla.suse.com/show_bug.cgi?id=1281408 * https://bugzilla.suse.com/show_bug.cgi?id=1281427 * https://bugzilla.suse.com/show_bug.cgi?id=1281496 * https://bugzilla.suse.com/show_bug.cgi?id=1281514 * https://bugzilla.suse.com/show_bug.cgi?id=1281546 * https://bugzilla.suse.com/show_bug.cgi?id=1281599 * https://bugzilla.suse.com/show_bug.cgi?id=1281644 * https://bugzilla.suse.com/show_bug.cgi?id=1281680 * https://bugzilla.suse.com/show_bug.cgi?id=1281694 * https://bugzilla.suse.com/show_bug.cgi?id=1281717 * https://bugzilla.suse.com/show_bug.cgi?id=1281732 * https://bugzilla.suse.com/show_bug.cgi?id=1281738 * https://bugzilla.suse.com/show_bug.cgi?id=1281777 * https://bugzilla.suse.com/show_bug.cgi?id=1281778 * https://bugzilla.suse.com/show_bug.cgi?id=1281786 * https://bugzilla.suse.com/show_bug.cgi?id=1281789 * https://bugzilla.suse.com/show_bug.cgi?id=1281793 * https://bugzilla.suse.com/show_bug.cgi?id=1281795 * https://bugzilla.suse.com/show_bug.cgi?id=1281808 * https://bugzilla.suse.com/show_bug.cgi?id=1281818 * https://bugzilla.suse.com/show_bug.cgi?id=1281825 * https://bugzilla.suse.com/show_bug.cgi?id=1281922 * https://bugzilla.suse.com/show_bug.cgi?id=1281927 * https://bugzilla.suse.com/show_bug.cgi?id=1281955 * https://bugzilla.suse.com/show_bug.cgi?id=1281964 * https://bugzilla.suse.com/show_bug.cgi?id=1281973 * https://bugzilla.suse.com/show_bug.cgi?id=1281988 * https://bugzilla.suse.com/show_bug.cgi?id=1281993 * https://bugzilla.suse.com/show_bug.cgi?id=1281995 * https://bugzilla.suse.com/show_bug.cgi?id=1281997 * https://bugzilla.suse.com/show_bug.cgi?id=1282020 * https://bugzilla.suse.com/show_bug.cgi?id=1282034 * https://bugzilla.suse.com/show_bug.cgi?id=1282040 * https://bugzilla.suse.com/show_bug.cgi?id=1282041 * https://bugzilla.suse.com/show_bug.cgi?id=1282042 * https://bugzilla.suse.com/show_bug.cgi?id=1282050 * https://bugzilla.suse.com/show_bug.cgi?id=1282054 * https://bugzilla.suse.com/show_bug.cgi?id=1282072 * https://bugzilla.suse.com/show_bug.cgi?id=1282104 * https://bugzilla.suse.com/show_bug.cgi?id=1282110 * https://bugzilla.suse.com/show_bug.cgi?id=1282113 * https://bugzilla.suse.com/show_bug.cgi?id=1282143 * https://bugzilla.suse.com/show_bug.cgi?id=1282170 * https://bugzilla.suse.com/show_bug.cgi?id=1282193 * https://bugzilla.suse.com/show_bug.cgi?id=1282197 * https://bugzilla.suse.com/show_bug.cgi?id=1282270 * https://bugzilla.suse.com/show_bug.cgi?id=1282271 * https://bugzilla.suse.com/show_bug.cgi?id=1282284 * https://bugzilla.suse.com/show_bug.cgi?id=1282286 * https://bugzilla.suse.com/show_bug.cgi?id=1282288 * https://bugzilla.suse.com/show_bug.cgi?id=1282383 * https://bugzilla.suse.com/show_bug.cgi?id=1282648 * https://bugzilla.suse.com/show_bug.cgi?id=1282672 * https://bugzilla.suse.com/show_bug.cgi?id=1282767 * https://bugzilla.suse.com/show_bug.cgi?id=1282774 * https://bugzilla.suse.com/show_bug.cgi?id=1282803 * https://bugzilla.suse.com/show_bug.cgi?id=1282810 * https://bugzilla.suse.com/show_bug.cgi?id=1282812 * https://bugzilla.suse.com/show_bug.cgi?id=1282823 * https://bugzilla.suse.com/show_bug.cgi?id=1282881 * https://bugzilla.suse.com/show_bug.cgi?id=1282891 * https://bugzilla.suse.com/show_bug.cgi?id=1282906 * https://bugzilla.suse.com/show_bug.cgi?id=1282997 * https://bugzilla.suse.com/show_bug.cgi?id=1283121 * https://bugzilla.suse.com/show_bug.cgi?id=1283154 * https://bugzilla.suse.com/show_bug.cgi?id=1283163 * https://bugzilla.suse.com/show_bug.cgi?id=1283176 * https://bugzilla.suse.com/show_bug.cgi?id=1283201 * https://bugzilla.suse.com/show_bug.cgi?id=1283213 * https://bugzilla.suse.com/show_bug.cgi?id=1283230 * https://bugzilla.suse.com/show_bug.cgi?id=1283312 * https://bugzilla.suse.com/show_bug.cgi?id=1283500 * https://bugzilla.suse.com/show_bug.cgi?id=1283805 * https://bugzilla.suse.com/show_bug.cgi?id=1283935 * https://bugzilla.suse.com/show_bug.cgi?id=1283973 * https://bugzilla.suse.com/show_bug.cgi?id=1284146 * https://jira.suse.com/browse/PED-16401 * https://jira.suse.com/browse/PED-16892 * https://jira.suse.com/browse/PED-16993 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:10:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:10:49 -0000 Subject: SUSE-SU-2026:24313-1: important: Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300584976.6825.13732948305317797912@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24313-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-718 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-42-rt-9-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_20-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-rt-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:00 -0000 Subject: SUSE-SU-2026:24312-1: important: Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300586061.6825.292999193673441867@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24312-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-717 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-45-rt-debuginfo-8-1.2 * kernel-livepatch-6_4_0-45-rt-8-1.2 * kernel-livepatch-MICRO-6-0-RT_Update_22-debugsource-8-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:11 -0000 Subject: SUSE-SU-2026:24311-1: important: Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300587124.6825.12431484950324931958@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24311-1 Release Date: 2026-10-19T12:40:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-716 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-46-rt-8-1.1 * kernel-livepatch-6_4_0-46-rt-debuginfo-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:22 -0000 Subject: SUSE-SU-2026:24310-1: important: Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300588228.6825.17947761969671584948@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24310-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-715 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_19-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-rt-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-rt-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:33 -0000 Subject: SUSE-SU-2026:24309-1: important: Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300589359.6825.12295697441493204446@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24309-1 Release Date: 2026-10-19T12:31:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-714 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-43-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_21-debugsource-8-1.1 * kernel-livepatch-6_4_0-43-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:44 -0000 Subject: SUSE-SU-2026:24308-1: important: Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300590478.6825.10156520632512439878@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24308-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-713 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-47-rt-7-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-rt-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:11:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:11:55 -0000 Subject: SUSE-SU-2026:24307-1: important: Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300591579.6825.12136266493269134098@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24307-1 Release Date: 2026-10-19T12:30:37Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-712 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-48-rt-debuginfo-6-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-rt-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:12:05 -0000 Subject: SUSE-SU-2026:24306-1: important: Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300592568.6825.13352849124120189650@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24306-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-711 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-49-rt-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-rt-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:12:15 -0000 Subject: SUSE-SU-2026:24305-1: important: Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300593563.6825.4754989987413444412@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24305-1 Release Date: 2026-10-19T12:30:09Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-710 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-50-rt-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-rt-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:12:27 -0000 Subject: SUSE-SU-2026:24304-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300594722.6825.15386801398522356313@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24304-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-693 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-36-rt-18-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-18-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:12:38 -0000 Subject: SUSE-SU-2026:24303-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300595845.6825.14120097752563183185@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24303-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-692 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-37-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-37-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_13-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:12:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:12:49 -0000 Subject: SUSE-SU-2026:24302-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300596950.6825.8774878358108358206@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24302-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-691 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-38-rt-debuginfo-14-1.1 * kernel-livepatch-6_4_0-38-rt-14-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_14-debugsource-14-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:13:01 -0000 Subject: SUSE-SU-2026:24301-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300598175.6825.8893962488469959148@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24301-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-690 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-39-rt-debuginfo-13-1.1 * kernel-livepatch-6_4_0-39-rt-13-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_15-debugsource-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:13:14 -0000 Subject: SUSE-SU-2026:24300-1: important: Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300599419.6825.16554249989725462393@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24300-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-689 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-40-rt-12-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-12-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:13:27 -0000 Subject: SUSE-SU-2026:24299-1: important: Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300600749.6825.16593454319294663686@3c67540d6a94> # Security update for the Linux Kernel RT (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24299-1 Release Date: 2026-10-19T12:03:30Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-688 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-51-rt-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_28-debugsource-4-1.1 * kernel-livepatch-6_4_0-51-rt-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:38 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:13:38 -0000 Subject: SUSE-SU-2026:24298-1: important: Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300601873.6825.6374985449143946097@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 22 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24298-1 Release Date: 2026-10-19T12:05:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-45.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-700 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-45-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-45-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_22-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:13:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:13:49 -0000 Subject: SUSE-SU-2026:24297-1: important: Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300602972.6825.5469895086892912380@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24297-1 Release Date: 2026-10-19T12:05:13Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-47.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-698 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-47-default-7-1.1 * kernel-livepatch-MICRO-6-0_Update_24-debugsource-7-1.1 * kernel-livepatch-6_4_0-47-default-debuginfo-7-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:01 -0000 Subject: SUSE-SU-2026:24296-1: important: Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300604144.6825.15882844985089918048@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24296-1 Release Date: 2026-10-19T12:04:47Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-699 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-46-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-46-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_23-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:11 -0000 Subject: SUSE-SU-2026:24295-1: important: Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300605163.6825.12136518369381812968@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24295-1 Release Date: 2026-10-19T12:04:32Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-49.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-696 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-49-default-debuginfo-5-1.1 * kernel-livepatch-MICRO-6-0_Update_26-debugsource-5-1.1 * kernel-livepatch-6_4_0-49-default-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:21 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:21 -0000 Subject: SUSE-SU-2026:24294-1: important: Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300606160.6825.2000577294514518224@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24294-1 Release Date: 2026-10-19T12:04:08Z Rating: important References: * bsc#1269775 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-695 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-50-default-5-1.1 * kernel-livepatch-MICRO-6-0_Update_27-debugsource-5-1.1 * kernel-livepatch-6_4_0-50-default-debuginfo-5-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:33 -0000 Subject: SUSE-SU-2026:24293-1: important: Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300607313.6825.2908933322417440079@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24293-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-697 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_25-debugsource-6-1.1 * kernel-livepatch-6_4_0-48-default-6-1.1 * kernel-livepatch-6_4_0-48-default-debuginfo-6-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:40 -0000 Subject: SUSE-SU-2026:24292-1: important: Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300608010.6825.3480700692508066336@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24292-1 Release Date: 2026-10-19T12:03:56Z Rating: important References: * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-51.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-694 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-51-default-4-1.1 * kernel-livepatch-6_4_0-51-default-debuginfo-4-1.1 * kernel-livepatch-MICRO-6-0_Update_28-debugsource-4-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:14:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:14:50 -0000 Subject: SUSE-SU-2026:24291-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300609084.6825.15281748463574477413@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24291-1 Release Date: 2026-10-19T12:02:22Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-709 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-35-default-18-1.1 * kernel-livepatch-MICRO-6-0_Update_12-debugsource-18-1.1 * kernel-livepatch-6_4_0-35-default-debuginfo-18-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:02 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:15:02 -0000 Subject: SUSE-SU-2026:24290-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300610206.6825.2546866167275005050@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24290-1 Release Date: 2026-10-19T12:02:22Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-708 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-36-default-16-1.1 * kernel-livepatch-MICRO-6-0_Update_13-debugsource-16-1.1 * kernel-livepatch-6_4_0-36-default-debuginfo-16-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:15:13 -0000 Subject: SUSE-SU-2026:24289-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300611350.6825.15361402325686439405@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24289-1 Release Date: 2026-10-19T12:02:18Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-38.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-707 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_14-debugsource-14-1.2 * kernel-livepatch-6_4_0-38-default-14-1.2 * kernel-livepatch-6_4_0-38-default-debuginfo-14-1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:15:25 -0000 Subject: SUSE-SU-2026:24288-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300612589.6825.5599662773902156953@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24288-1 Release Date: 2026-10-19T12:02:17Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-39.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-706 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-39-default-13-1.1 * kernel-livepatch-MICRO-6-0_Update_16-debugsource-13-1.1 * kernel-livepatch-6_4_0-39-default-debuginfo-13-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:15:37 -0000 Subject: SUSE-SU-2026:24287-1: important: Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300613769.6825.4531405158848825557@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 17 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24287-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-705 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_17-debugsource-12-1.1 * kernel-livepatch-6_4_0-40-default-12-1.1 * kernel-livepatch-6_4_0-40-default-debuginfo-12-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:15:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:15:49 -0000 Subject: SUSE-SU-2026:24286-1: important: Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300614959.6825.8237013738269996421@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24286-1 Release Date: 2026-10-19T12:02:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-41.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-704 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_18-debugsource-11-1.1 * kernel-livepatch-6_4_0-41-default-debuginfo-11-1.1 * kernel-livepatch-6_4_0-41-default-11-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:16:01 -0000 Subject: SUSE-SU-2026:24285-1: important: Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300616191.6825.9677366620226095369@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 19 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24285-1 Release Date: 2026-10-19T12:02:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-42.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-703 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_19-debugsource-9-1.1 * kernel-livepatch-6_4_0-42-default-9-1.1 * kernel-livepatch-6_4_0-42-default-debuginfo-9-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:16:13 -0000 Subject: SUSE-SU-2026:24284-1: important: Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300617370.6825.16025494747656519316@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24284-1 Release Date: 2026-10-19T12:02:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-43.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-702 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-43-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-43-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_20-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:26 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:16:26 -0000 Subject: SUSE-SU-2026:24283-1: important: Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Message-ID: <179300618632.6825.4182273327869797369@3c67540d6a94> # Security update for the Linux Kernel (Live Patch 21 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:24283-1 Release Date: 2026-10-19T12:01:52Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-44.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-701 ## Package List: * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-livepatch-6_4_0-44-default-debuginfo-8-1.1 * kernel-livepatch-6_4_0-44-default-8-1.1 * kernel-livepatch-MICRO-6-0_Update_21-debugsource-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:16:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:16:57 -0000 Subject: SUSE-SU-2026:24282-1: important: Security update for helm Message-ID: <179300621754.6825.3840514042426733474@3c67540d6a94> # Security update for helm Announcement ID: SUSE-SU-2026:24282-1 Release Date: 2026-10-19T09:48:48Z Rating: important References: * bsc#1261935 * bsc#1261938 * bsc#1261939 * bsc#1265428 * bsc#1265758 * bsc#1270127 * bsc#1271660 * bsc#1271997 * bsc#1275024 * bsc#1275025 * bsc#1276327 * bsc#1276510 * bsc#1276514 * bsc#1281112 * bsc#1281426 * bsc#1281468 * bsc#1281469 * bsc#1283642 * bsc#1284104 Cross-References: * CVE-2026-33814 * CVE-2026-35204 * CVE-2026-35205 * CVE-2026-35206 * CVE-2026-41178 * CVE-2026-41888 * CVE-2026-48978 * CVE-2026-50151 * CVE-2026-50163 * CVE-2026-56852 * CVE-2026-56854 * CVE-2026-56855 * CVE-2026-56864 * CVE-2026-56865 * CVE-2026-63209 * CVE-2026-78662 * CVE-2026-81870 * CVE-2026-81871 * CVE-2026-81872 * CVE-2026-85732 CVSS scores: * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-35204 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( SUSE ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35204 ( NVD ): 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35204 ( NVD ): 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2026-35205 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-35205 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35205 ( NVD ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35205 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-35206 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-35206 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-35206 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-41178 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41178 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-41888 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-41888 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-41888 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-41888 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-48978 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-48978 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-48978 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-50151 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50151 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50163 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-50163 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2026-56852 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56852 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56852 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56854 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-56854 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-56854 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56855 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-56855 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56855 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56864 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-56864 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-56865 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-56865 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78662 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78662 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-78662 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-81870 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-81870 ( NVD ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81871 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-81871 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-81872 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-81872 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-85732 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-85732 ( SUSE ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N * CVE-2026-85732 ( NVD ): 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 20 vulnerabilities can now be installed. ## Description: This update for helm fixes the following issues: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265758). * CVE-2026-35204: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary file write via specially crafted plugin (bsc#1261939). * CVE-2026-35205: github.com/helm/helm: helm.sh/helm/v4: Helm: Arbitrary code execution due to insufficient plugin provenance verification (bsc#1261935). * CVE-2026-35206: github.com/helm/helm: Helm: Files written to unexpected directory via specially crafted Chart (bsc#1261938). * CVE-2026-41178: go.opentelemetry.io/otel/baggage,go.opentelemetry.io/otel/propagation: no rejection of raw-length headers in baggage parsing allows for DoS via oversized inputs (bsc#1276510). * CVE-2026-41888: github.com/distribution/distribution/v3: tag deletion bypasses the storage.delete.enabled configuration (bsc#1265428). * CVE-2026-48978: oras.land/oras-go/v2/registry/remote/auth: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens (bsc#1270127). * CVE-2026-50151: oras-go: Credential forwarding via unvalidated Location header during blob upload (bsc#1271660). * CVE-2026-50163: oras-go: Information disclosure and arbitrary file access via crafted tarball hardlinks (bsc#1276327). * CVE-2026-56852: golang.org/x/text/unicode/norm: infinite loop on truncated/invalid UTF-8 input (bsc#1271997). * CVE-2026-56854,CVE-2026-56855,CVE-2026-78662: golang.org/x/crypto/ssh: authentication bypass and deadlocks in the crypto/ssh library (bsc#1281426). * CVE-2026-56864: x/mod/sumdb: ignore unrelated, unauthenticated hashes in Lookup (bsc#1275025). * CVE-2026-56865: x/mod/sumdb/tlog: fix transparency log tile verification bypass (bsc#1275024). * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283642). * CVE-2026-81870: OpenTelemetry-Go: Information disclosure via exporter (bsc#1284104). * CVE-2026-81871: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration (bsc#1281468). * CVE-2026-81872: go.opentelemetry.io/otel/sdk/log: OpenTelemetry-Go: Denial of Service via attacker-driven log emission (bsc#1281469). * CVE-2026-85732: oras.land/oras-go/v2: blind SSRF via unvalidated Link header URL in pagination allows internal network probing (bsc#1281112). * gRPC-Go: several issues affecting the xDS RBAC authorization engine and the HTTP/2 transport server implementation (bsc#1276514). Changes for helm: * update to 4.3.0: * feat: Add duration functions * feat(engine): add debug logging when lookup returns empty * feat: add ownership verification before deleting resources * feat: honor SOURCE_DATE_EPOCH for chart archives * feat(rollback): add --description flag to provide rollback reason * fix (internal/plugin): remove zero-width spaces from plugin name comment * fix(loader): do not drop values files ending at a 4096-byte boundary * fix(chart): normalize StampModTimes timestamp to UTC/truncate * Chart.lock reproducibility test * fix(provenance): support GnuPG keybox (pubring.kbx) keyrings * fix(template): regression - route registry messages to stderr in template and show * refactor: lower resync period from one hour to 3 minutes * perf: enable concurrent status computation to prevent multi-minute delays * fix: Improve error reporting for helm template --debug with \--show-only- #31185 * fix: fetch logs from all containers in test pods- #32099 * fix(provenance): check error return in Digest and encodeRelease- #32136 * fix panic on repeated IsReachable calls- #32184 * fix: set [pull,push] scope when helm push to a registry(use token auth) - v4- #31211 * Fix missing conflict retry with server-side apply- #32088 * Properly format the extra field in gzipped packages- #31884 * Fix vanishing empty lines- #32327 * fix: pass registry client to downloader.Manager in upgrade- #32400 * chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- #32450 * fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- #32521 * chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 43e8b7f (Terry Howe) * bump golang.org/x/text to v.0.40.0 * Revert: Fixed a race condition in WaitForDelete where the status observer canceled the watch too early, causing intermittent failures when running a full test suite #32214 * Fixed data race detected by -race flag when concurrent goroutines (upgrade + rollback, install + uninstall) both call GetWaiterWithOptions on the same FailingKubeClient instance #31925 * Fixed helm command success messages writing to stderr instead of stdout. Now correctly outputing to stdout #32056 * Fixed Helm 4 emitting "unable to find exact version" when using version range constraints #31757 * Fixed a race condition in WaitForDelete where the status failures when running a full test suite #32081 #32153 * Fixed SDK errors by upgrading dependencies: cli-utils 1.2.1, controller- runtime 0.24.1 and k8s 1.36.1 #32128 * Dependency updates * Bump to version v4.2 0646808 (George Jenkins) * build: Clean up Goreleaser change (#32098) e23bf3a (Scott Rigby) * fix: add -extldflags -static to dist target to match build-cross f60ab7c (Terry Howe) * build: use goreleaser build with manual archive creation 64aa46f (Terry Howe) * chore: remove build-cross dependency from test-acceptance d199a1a (Terry Howe) * ci: add fetch-depth 0 to canary checkout for goreleaser 8289940 * fix: address goreleaser build issues flagged in review c075022 (Terry Howe) * fix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive names 04885dd (Terry Howe) * fix: disable goreleaser checksums.txt and restrict zip to windows only 93103ce (Terry Howe) * fix: use index for optional env var in version_template e49a1dc * fix: canary build file names eaa0910 (Terry Howe) * Fix archive name 5a75279 (Terry Howe) * fix goreleaser archive 37284a9 (Terry Howe) * add support for loong64 45336cc (Terry Howe) * fix artifact directory a9659b0 (Terry Howe) * update configuration to v2 e368f17 (Terry Howe) * remove GOTOOLCHAIN e7bea85 (Terry Howe) * chore: replace mitchellh/gox with goreleaser 075c096 (Terry Howe) * chore(deps): bump github.com/distribution/distribution/v3 12f2c41 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 58e8ffd (dependabot[bot]) * chore(deps): bump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 e61bbfb (dependabot[bot]) * Upgrade kstatus to 1.2 and controller-runtime to 0.24 081c6df (Matheus Pimenta) * fix: adds topLevel permissions to improve openSSF scores 277d970 (Gagan H R) * Upgrade Go to 1.26, Kubernetes to 1.36, kstatus to 1.1 a4a9cc7 * fix(templating): hooks conflicting with templates in post-renderers (#32049) 8f56f24 (Matheus Pimenta) * docs: fix grammar and spacing in CONTRIBUTING.md db40adb (Mohit) * chore(deps): bump the k8s-io group with 7 updates 775e794 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.35.1 to 4.35.2 934ace3 (dependabot[bot]) * fix(templating): SplitManifests must preserve line endings for downstream YAML parsers (#31952) 265c5eb (Matheus Pimenta) * chore(deps): bump github.com/mattn/go-shellwords from 1.0.12 to 1.0.13 48e2b7d (dependabot[bot]) * Update pkg/chart/common/util/coalesce.go a8e2497 (Evans Mungai) * test(values): Add test for nil cleanup in partially overridden subchart maps 52fc971 (Johannes Lohmer) * fix(values): do not copy chart-default nils into coalesced values 0063877 (Johannes Lohmer) * test(values): add test for subchart nil producing %!s() 6eb4ebf (Johannes Lohmer) * test(values): add tests for subchart nil value regressions 5cb4e7d (Johannes Lohmer) * chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 b5c7c80 (dependabot[bot]) * fix(templating): fix wrong YAML separator parsing for post-renderers (#31941) a27f1ad (Matheus Pimenta) * fix: add debug logging to HTTP getter for helm pull c26be60 (Cairon) * chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 953f5f0 (dependabot[bot]) * chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 10fc5f3 (dependabot[bot]) * chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 d89e7c6 (dependabot[bot]) * chore: Update release notes script for Helm v4 8a95461 (George Jenkins) * refactor(cli): share RetryingRoundTripper via pkg/kubeenv 213c869 (Sumit Solanki) * chore(deps): bump github.com/lib/pq from 1.12.2 to 1.12.3 bd5027a (dependabot[bot]) * fix: unnecessary-format lint issues from merge 087736b (George * fix: Plugin missing provenance bypass 586eb57 (George Jenkins) * chore(deps): bump github.com/fluxcd/cli-utils c8c5dfa * chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 998466c (dependabot[bot]) go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp b0cec58 (dependabot[bot]) go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 6ebfb29 (dependabot[bot]) * test(kube): fix flaky WaitForDelete test by avoiding informer sync race a7f8443 (Terry Howe) * test(kube): fix flaky WaitForDelete timing in status wait tests 4c0d21f (Terry Howe) 08dea9c (dependabot[bot]) * Minor nit: fix import instructions to comply with canonical import paths de58531 (Anmol Virdi) 9b1ad4c (dependabot[bot]) * fix(action): return correct error variable in prepareUpgrade 8ef2d45 (Rhys McNeill) * chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.2 cd7cf76 (dependabot[bot]) * chore(deps): bump github/codeql-action from 4.30.7 to 4.35.1 45ee55b (dependabot[bot]) * chore(deps): bump github.com/lib/pq from 1.12.0 to 1.12.1 9a06741 (dependabot[bot]) * chore(deps): bump actions/setup-go from 6.2.0 to 6.4.0 d1e31ca * fix(kube): clarify server-side apply patch errors f257c95 (abhay1999) workflow 7025480 (Terry Howe) * refactor(cli): decouple EnvSettings from pkg/kube 64f1d0a (Sumit Solanki) * docs(registry): fix incorrect and improve clarity of comments in client.go 85bf56e (Debasish Mohanty) * refactor(cli): decouple EnvSettings from pkg/kube to avoid import cycles 1549937 (Sumit Solanki) * chore(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.1 c7a75b1 (dependabot[bot]) * chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.0 3a7573a (dependabot[bot]) * chore(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 0229da1 (dependabot[bot]) * docs(engine): fix misleading toTOML doc comment c1a5a6e (Ilya Kiselev) * feat(engine): add mustToToml template function b075f7a (Ilya * chore: fix unnecessary-format issues from revive 7edfff3 (Matthieu MOREL) * chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 37185d2 (dependabot[bot]) * chore: fix bool-compare issues from testifylint 071558d * chore: enable perfsprint linter 6249489 (Matthieu MOREL) * ignore error plugin loads (cli, getter) 47a0840 (George * chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 3d06fd1 (dependabot[bot]) * fix(kube): remove legacy import comments from test files e64d628 (Terry Howe) * pkg/kube: remove legacy import comments d7cdc9e (abhay1999) * fix: Plugin version path traversal 36dcc27 (George Jenkins) * chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 c4be7af (dependabot[bot]) * chore: fix some minor issues in the comments 259f181 (tsinglua) * fix: Chart dot-name path bug 6018499 (George Jenkins) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.1 to 0.23.3 74e7cf8 (dependabot[bot]) * fix: insert newline after doc separators glued to content by template trimming af94abf (Matheus Pimenta) * chore(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 16073b1 (dependabot[bot]) * chore: enable modernize linter (#31860) e31a078 (Matthieu MOREL) * Restored --atomic flag on install command 16573f8 (Travis Leeden) * fix: bump go.opentelemetry.io/otel/sdk to v1.40.0 for GO-2026-4394 b550ce9 (Terry Howe) * fix: bump fluxcd/cli-utils to v0.37.2-flux.1 1dfa77e (Terry * Update pkg/cmd/status.go 5d40f17 (Matthieu MOREL) * chore(internal): enable perfsprint linter (#31871) d4f6193 * chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 82d9bed (dependabot[bot]) * chore(pkg): fix perfsprint linter issues part 6 dc0e3f1 * chore(pkg): enable perfsprint linter e3c74fd (Matthieu MOREL) * chore(pkg): enable perfsprint linter 1d2d63c (Matthieu MOREL) * chore(pkg): enable perfsprint linter 63f03c0 (Matthieu MOREL) * chore(pkg): enable perfsprint linter c25c988 (Matthieu MOREL) * chore(pkg): enable perfsprint linter 0fecfd0 (Matthieu MOREL) * chore(internal): enable perfsprint linter 6524162 (Matthieu * chore(pkg): enable perfsprint linter 6c2cb2f (Matthieu MOREL) * chore(internal): enable perfsprint linter 9409226 (Matthieu * Replace unneeded use of t.Fatalf with t.Fatal 36cb3a2 (Mads Jensen) * fix: enable nolinlint linter 5b6c6bb (Matthieu MOREL) * fixup strings.Cut variables b667317 (George Jenkins) * chore: Improve AGENTS.md 956c724 (George Jenkins) * chore: fixes 92b64e8 (George Jenkins) * fix: correct import comment in statuswait.go from v3 to v4 c59c140 (rohansood10) * fix: handle OCI digest algorithm prefix in chart downloader (#31601) ee01860 (Evans Mungai) * chore(deps): bump actions/stale from 10.1.1 to 10.2.0 304d25f * chore(deps): bump the k8s-io group with 7 updates 0b13436 * feat(release): add internal/release/v2 package for chart v3 support (#31709) 4a91f3a (Evans Mungai) 7823853 (dependabot[bot]) aec7ace (dependabot[bot]) a23b638 (dependabot[bot]) 5cddc95 (dependabot[bot]) * chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.0 to 0.21.1 2e266c3 (dependabot[bot]) * fix(pkg): errorlint linter 259f76a (Matthieu MOREL) * fix(internal): errorlint linter 0254182 (Matthieu MOREL) * fix(pkg): errorlint linter 6d1490e (Matthieu MOREL) * fix(pkg): errorlint linter 4d0ae7f (Matthieu MOREL) * fix(internal): errorlint linter abecafa (Matthieu MOREL) * fix(pkg): errorlint linter 4330bde (Matthieu MOREL) * fix(pkg): errorlint linter c8989d9 (Matthieu MOREL) * fix(cmd): errorlint linter edbd705 (Matthieu MOREL) * chore: new KEYS entry for George Jenkins 5638c35 (George * fix(downloader): safely handle concurrent file writes on Windows 76eb37c (Orgad Shaneh) * fix(install): check nil for restClientGetter and fix tests 9817a68 (Manuel Alonso) * feat(create): add --chart-api-version flag (when HELM_EXPERIMENTAL_CHART_V3 env var is set) (#31592) 5aac320 (Evans Mungai) * chore(pkg): fix modernize linter 0d75d86 (Matthieu MOREL) * chore(internal): fix modernize linter 859292e (Matthieu MOREL) * chore(pkg): fix modernize linter 5cc2e55 (Matthieu MOREL) * chore(pkg): fix modernize linter ba38159 (Matthieu MOREL) * chore(internal): fix modernize linter e2d184c (Matthieu MOREL) * chore(pkg): fix modernize linter 111d4e6 (Matthieu MOREL) * add image index test e8f386b (Pedro Torres) * fix pulling charts from OCI indices d983696 (Pedro Torres) 9c9c3a6 (dependabot[bot]) * Revert "Consider GroupVersionKind when matching resources" 787b61c (Matheus Pimenta) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.23.0 to 0.23.1 becf9bf (dependabot[bot]) * fix(template): deprecate unused --hide-notes and \--render-subchart-notes flags 6d5f56f (Scott Rigby) * chore(deps): bump github.com/fluxcd/cli-utils b53198e * chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 b59e533 * whitespace ec07265 (Austin Abro) * fix(copystructure): handle nil elements in slice copying e3829eb (Philipp Born) * use logger with waiter 63b40a7 (Austin Abro) * feat(kstatus): fine-grained context options for waiting b0b35f1 * Apply suggestions from code review 26e28e8 (George Jenkins) * Remove legacy sync-repo.sh script 97fd007 (Jeevan Yewale) * chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.4 to 0.23.0 5262007 (dependabot[bot]) * docs: document uninstall using cascade foreground flag e70d59d * bugfix(kstatus): do not wait forever on failed resources bbec77c (Matheus Pimenta) * Modernize Helm v3 CONTRIBUTING.md 443a2a6 (George Jenkins) * chore(defaults): server-side apply SDK defaults should always match the CLI defaults c1cc625 (Matheus Pimenta) * chore: clarify --wait flag help text 828038a (Evans Mungai) * chore(deps): bump actions/setup-go from 6.1.0 to 6.2.0 e223771 * chore(refactor): better testing and functionality for installing crd 6501ef4 (Manuel Alonso) * bugfix(storage): fix storage not getting logger from driver a8eb527 (Matheus Pimenta) da1d68a (dependabot[bot]) * fix(test): fix tests and check nil for restclient 0f949a9 (Manuel Alonso) * fix(test): merge fix correctly 561410a (Manuel Alonso Gonzalez) * Remove refactorring changes from coalesce_test.go 0298b2f * Fix import b8937ad (Evans Mungai) * Update pkg/chart/common/util/coalesce_test.go a333bba (Evans Mungai) * Fix rollback for missing resources 374aeb4 (Feruzjon Muyassarov) * fix(install): add more tests and check nil file data 00f0a48 * fix(test): no check empty resources 0357e8d (Manuel Alonso) * fix(install): check lenght and file nil, add tests 52235cc * fix(action): crd resources can be empty 268593b (Manuel Alonso) * fix: casing issue fixed 1709114 (Mujib Ahasan) * fix: error handled correctly 9486062 (Mujib Ahasan) * fix: doc string added 12e8b71 (Mujib Ahasan) * Fix lint warning 3416dd5 (Evans Mungai) * Preserve nil values in chart already 679f051 (Evans Mungai) * fix(values): preserve nil values when chart default is empty map 292fe70 (Evans Mungai) * update: test coverage added for helper function validateNameAndGenerateName 1154099 (Mujib Ahasan) * update: helper function added for the business logic 522d2fe (Mujib Ahasan) * generateName is also considered in logic 6769fb6 (Mujib Ahasan) * fxi: test concurrency download index 64bae71 (Terry Howe) * update: business logic respected for skipping object missing name b357bca (Mujib Ahasan) * fixed: --dry-run=server now respect generateName 2820ebe (Mujib Ahasan) * Make error message instructional for the case of lock file being out of date 1836c59 (Andreas Sommer) * GHSA-q5jf-9vfq-h4h7 Plugin verification fails open when .prov is missing, allowing unsigned plugin install * GHSA-vmx8-mqv2-9gmg Path traversal in plugin metadata version enables arbitrary file write outside Helm plugin directory * fix: Plugin missing provenance bypass 05fa379 (George * fix: Chart dot-name path bug 4e7994d (George Jenkins) * ignore error plugin loads (cli, getter) 2581943 (George * fix: Plugin version path traversal 36c8539 (George Jenkins) scorecards workflow c61e086 (Terry Howe) * Fixed a bug where --dry-run=server was not respecting generateName #31563 * Fixed a bug where empty CRD resources caused a crash. Now it prints an error #31578 * Fixed a bug where OCI references with tag+digest failed with "invalid byte" error #31601 * Fixed a bug where user-provided nil value was not preserved when chart has an empty map or no default for a key #31644 * Fixed a regression since Helm 3.18.0 where Pulling charts from OCI repositories that use an index to store both Container Images and Helm Charts under the same tag failed #31776 * Fixed a Helm 4 regression where gotemplate white space trimming directly after YAML doc separators, when present after postrendering, caused YAML file corruption #31868 * Fixed a bug where `FailedStatus` is treated as a terminal state, causing upgrades to fail prematurely when cluster autoscalers needed time to provision nodes, or when pods were being deleted during rolling updates #31897 * Fixed broken backwards compatibility for deprecated `--atomic` flag on install command #31901 * SDK: Fixed a Windows 'Access Deined' error if multiple processes try to download the same chart version concurrently #31128 * SDK: Fixed a bug where users did not receive any logs from the waiter, causing confusion as several minutes could pass with no user feedback #31717 * SDK: Fixed a bug where server-side apply defaults did not always match the CLI defaults #31732 * SDK: Fixed a Go import issue when downstream tooling attempted to vendor helm.sh/helm/v4/pkg/kube #31852 * Fixed a bug where --dry-run=server was not respecting * Fixed a bug where empty CRD resources caused a crash. Now it * Fixed a bug where OCI references with tag+digest failed with * Fixed a bug where user-provided nil value was not preserved * Fixed a regression since Helm 3.18.0 where Pulling charts * Fixed a Helm 4 regression where gotemplate white space * Fixed a bug where FailedStatus is treated as a terminal * Fixed broken backwards compatibility for deprecated --atomic flag on install command #31901 * SDK: Fixed a Windows 'Access Deined' error if multiple * SDK: Fixed a bug where users did not receive any logs from * SDK: Fixed a bug where server-side apply defaults did not * SDK: Fixed a Go import issue when downstream tooling * Update to version 4.1.1: * fix: fine-grained context options for waiting #31735 * fix: kstatus do not wait forever on failed resources #31730 * fix: Revert "Consider GroupVersionKind when matching resources" #31772 * fix: handle nil elements in slice copying #31751 * Feature: added chart name to dependency logs, namespace to resource waiting logs, and confirmation message when all resources are ready #31530 * Feature: improved plugin name validation error messages and field name detection #31491 * Feature: improved the --wait flag by allowing explicit strategy selection (including explicit --wait=hookOnly) and preventing SDK timeout errors when timeout is not specified #31421 * Feature: allow concurrent dependency build with atomic file write #30984 * Feature: added a --no-headers flag to the 'helm repo list' command, allowing users to suppress table headers in the output. Useful for scripting and automation #31448 * SDK feature: added a LoadArchive to common loader #31462 * SDK feature: introduced support for custom kstatus readers #31706 * Fixed bug where a plugin name could already be used by another command #31427 * Fixed bug where --server-side flag was not passed to install when using upgrade --install #31635 * Fixed bug where HELM_ environment variables were not passed to plugins. this fixes a regression which was blocking some getter plugins #31613 * Fixed bug where Helm test --logs failed with hook-delete-policy "hook- failed" or "hook-succeed" #31579 * Fixed kube client logging issue #31560 * Fixed regression where vendor-specific suffixes were stripped from .Capabilities.KubeVersion.GitVersion, breaking charts that detect managed Kubernetes platforms #31528 * Fixed a bug where helm uninstall with --keep-history did not suspend previous deployed releases #12564 * docs: updated helm template help text to document \--api-versions #31683 * docs: fixed documentation about default wait strategy * Update pkg/kube/statuswait.go * pkg/kube: introduce support for custom kstatus readers * chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 * fix(release): fix test compilation error * Suppress SC2154 without changing behavior * Lint sync-repo.sh with ShellCheck * chore: move Evans Mungai from triage to maintainers * Replace reflect.Ptr with reflect.Pointer * fix: typo in the function names * Add documentation for --api-versions flag in template command * Fixing failing tests for cli-tools update * chore(deps): bump github.com/fluxcd/cli-utils * Replace deprecated `NewSimpleClientset` * docs(README): add mise alternate installation documentation * enable exhaustive linter * fix: add default casess to switch statements * build: set kube version via `debug.BuildInfo` * chore(deps): bump github.com/tetratelabs/wazero from 1.10.1 to 1.11.0 * doc: update based on review suggestion * test(statuswait): fix Copilot code review suggestion for goroutine in tests * test(statuswait): add more tests suggested by Copilot code review * test(statuswait): add some tests for statuswait * fix: use namespace-scoped watching to avoid cluster-wide LIST permissions * fix(doc): Update default wait strategy * Update to use slog * Fix TestCliPluginExitCode * Check plugin name is not used * Fix `TestConcurrencyDownloadIndex` typo * Use errors.Is to check for io.EOF and gzip.ErrHeader * chore(deps): bump actions/upload-artifact from 4.6.2 to 6.0.0 * chore: fix some comments to improve readability * feat: move TerryHowe triage to maintainers * Use latest patch release of Go in releases * fix(upgrade): pass --server-side flag to install when using upgrade --install * chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 * Run the vulnerability check on PR that change the file * Fix govulncheck in CI * Update the govulncheck.yml to run on change * Enable the sloglint linter * fix(cli): handle nil config in EnvSettings.Namespace() * fix(getter): pass settings environment variables * fixes comment in install.go * chore(deps): bump actions/stale from 10.1.0 to 10.1.1 * chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 * fixes tests after merge * fixes lint issue * updates tests after rebase from master * Add tests to action package to improve coverage * chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 * Inform we use a different golangci-lint version than the CI * Deal with golint warning with private executeShutdownFunc * Use length check for MetaDependencies instead of nil comparison * Code review * Fix linting issue * Update pkg/action/hooks.go * added check for nil shutdown * cleaned up empty line * updated comment and made defer of shutdown function return errors as before and not the possible shutdown error * added shutdown hook that is executed after the logs have been retrieved * chore: fix typo in pkg/downloader/chart_downloader.go * Bump required go version (`go.mod` version) * Use modernize to use newer Golang features. * Remove two redundant if-checks. * Fix kube client logging * chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 * chore(deps): bump actions/checkout from 5.0.1 to 6.0.0 * chore(deps): bump actions/setup-go from 5.5.0 to 6.1.0 * fix: prevent segmentation violation on empty yaml in multidoc * fix: prevent reporting fallback on version when none specified * fix: add missing context to debug logs * fix: preserve vendor suffixes in KubeVersion.GitVersion * chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 * fixup test * logs * fix * chore: add warning for registry login with namespace * style: linting * test: split tests between valid and invalid * test: convert tests to table drive tests * test: refactor TestMetadataLegacyValidate to be more generic * update tests * fix: Use server-side apply for object create during update * Copy adopted resource info * Refactor environment variable expansion in PrepareCommands and update tests * fix: correct LDFLAGS path for default Kubernetes version * fix: improve plugin name validation err messages early via unmarshalling * fix: Make invalid name error message more similar and move tests * fix: focus only on plugin name but give more info about what we get * Make validation error similar and explicit for both metadatas * fix: improve plugin name validation error messages * Fix syntax errors in the document * docs: Fix LFX Health Score badge URL in README.md * chore(deps): bump github.com/tetratelabs/wazero from 1.9.0 to 1.10.1 * Publish Helm v4 -> `helm-latest-version` * Adding script to download Helm v4 * refactor: use strings.Builder to improve performance * chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.20.1 to 0.21.0 * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 * Update pkg/cmd/flags.go * Error strategy list match help * Prevent surprising failure with SDK when timeout is not set * Do not change the default waiting strategy when --wait is not set * Provide more help for SDK user when setting up WaitStrategy * Avoid confusion between `--wait` (watcher) and no --wait (hookOnly) * The default is not HookOnlyStrategy but WaitStrategy * Make wait strategy selection more obvious * Increase documentation of --wait flag * While testing SDK features for v4. I was surprised with the error: * fix: do not run release workflow on forks * Convert pkg/cmd/load_plugins.go to slog * Rename copilot-instructions.md to AGENTS.md * fix(rollback): `errors.Is` instead of string comp * fix(uninstall): supersede deployed releases * for remaining local variable case inconsistency * Properly test error messages on pull command's test * Adding a LoadArchive to common loader * for all other similar cases * chore(deps): bump sigs.k8s.io/controller-runtime from 0.22.3 to 0.22.4 * chore: increase logging package test coverage * feat(repo): add --no-headers option to 'helm repo list' * chore: fix typo of public field * rename interface{} to any * test: protect unknown hook delete policies * chore: replace github.com/mitchellh/copystructure * fix: Fix Helm v4 release distribtion/get-helm-3 script * fix test * Make test scripts run without /bin/bash * Ignore duplicated URN in logs * chore: delete unused var in installer.go * fix: assign KUBECONFIG environment variable value to env.Kubeconfig * add concurrency test on write & load index file * update writing index files to writeAtomicFile * fix index concurrency * Update to version 4.0.5: * Fixed rollback error when a manifest is removed in a failed upgrade #13437 * Fixed check to ensure CLI plugin does not load with the same name as an existing Helm command * Fixed helm test --logs failure with hook-delete-policy "hook-failed" or "hook-succeed" #9098 * Fixed a bug where empty dependency lists were incorrectly treated as present * Fixed a bug where the watch library did not only watch namespaces associated with the objects * Fixed regression in downloader plugins environment variables #31612 * Fixed bug where --server-side flag is not respected with helm upgrade --install #31627 * For SDK users: exposed KUBECONFIG to env upgrade --install 1b6053d (Evans Mungai) 1e3ee1d (Zadkiel AHARONIAN) * fix(getter): pass settings environment variables 31bd995 (Zadkiel AHARONIAN) goroutine in tests 41a6b36 (Mohsen Mottaghi) review 2a2e6f7 (Mohsen Mottaghi) * test(statuswait): add some tests for statuswait 3818c02 (Mohsen Mottaghi) permissions 66cab24 (Mohsen Mottaghi) comparison abf2007 (Calvin Bui) 4b3de18 (Benoit Tigeot) * Code review 3212770 (Benoit Tigeot) * Fix linting issue 417aae9 (Benoit Tigeot) * Update pkg/action/hooks.go 6c838b4 (Michelle Fernandez Bieber) * added check for nil shutdown c5d87f2 (Michelle Fernandez * cleaned up empty line 53175b7 (Michelle Fernandez Bieber) errors as before and not the possible shutdown error d2df1ab (Michelle Fernandez Bieber) retrieved 5b223de (Michelle Fernandez Bieber) * Fix TestCliPluginExitCode e845b68 (tison) * Check plugin name is not used 30bfd57 (tison) * Fix rollback for missing resources 0fd2c41 (Feruzjon env.Kubeconfig b456e27 (LinPr) * fix(rollback): errors.Is instead of string comp e2021f8 * fix(uninstall): supersede deployed releases af7c153 (Hidde * Update to version 4.0.4 (4.0.3 was not released): * Bump v4.0.2 CVE deps cd700e0 (George Jenkins) * Use latest patch release of Go in releases 9db13ee (Matt * Update to version 4.0.2: * fix: prevent reporting fallback on version when none specified * fix: prevent segmentation violation on empty yaml in multidoc * Ignore duplicated URN in logs * jsonschema: warn and ignore unresolved URN $ref to match v3.18.4 * Publish Helm v4 -> `helm-latest-version` * fix: Fix Helm v4 release distribtion/get-helm-3 script * Copy adopted resource info 12500dd (George Jenkins) * fixup test 1cf3841 (George Jenkins) * logs 32e2d08 (George Jenkins) * fix 4b6472f (George Jenkins) * fix: Use server-side apply for object create during update 9dfe3b3 (George Jenkins) * Fix kube client logging 861adc2 (Matt Farina) * update tests b2f7872 (yxxhero) * Refactor environment variable expansion in PrepareCommands and update tests 77f97a1 (yxxhero) * Fix syntax errors in the document a156195 (Fish-pro) * fix: correct LDFLAGS path for default Kubernetes version 2c0dcda (Benoit Tigeot) * New Features Helm 4 has numerous new features, but a few deserve highlighting here: * Redesigned plugin system that supports Web Assembly based plugins * Post-renderers are now plugins * Server side apply is now supported * Improved resource watching, to support waiting, based on kstatus * Local Content-based caching (e.g. for charts) * Logging via slog enabling SDK logging to integrate with modern loggers * Reproducible builds of chart archives * Updated SDK API including support for multiple chart API versions (new experimental v3 chart API version coming soon) * Compatibility with Helm v3 Helm v4 is a major version with backward incompatible changes including to the flags and output of the Helm CLI and to the SDK. Please evaluate the changes to your workflows. The changes are not as extensive as those from Helm v2 to v3, with the goal that the majority of workflows remain compatible between Helm v3 and v4. Helm charts apiVersion v2 (majority of today's charts) will continue to be supported in Helm v4. Existing charts should continue to install, upgrade, and otherwise work. Please test the installation and upgrade of charts to ensure it works as expected. Changes (e.g., server side apply) may impact the experience. * Breaking Changes * Post-renderers implemented as plugins Post-renderers are implemented as plugins. With this change, it is no longer possible to pass an executable directly to helm render --post-renderer, but a plugin name must be passed. This might require updates to existing any post-renderer workflows. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-754 ## Package List: * SUSE Linux Micro 6.1 (ppc64le s390x x86_64) * helm-4.3.0-slfo.1.1_1.1 * helm-debuginfo-4.3.0-slfo.1.1_1.1 * SUSE Linux Micro 6.1 (noarch) * helm-bash-completion-4.3.0-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-35204.html * https://www.suse.com/security/cve/CVE-2026-35205.html * https://www.suse.com/security/cve/CVE-2026-35206.html * https://www.suse.com/security/cve/CVE-2026-41178.html * https://www.suse.com/security/cve/CVE-2026-41888.html * https://www.suse.com/security/cve/CVE-2026-48978.html * https://www.suse.com/security/cve/CVE-2026-50151.html * https://www.suse.com/security/cve/CVE-2026-50163.html * https://www.suse.com/security/cve/CVE-2026-56852.html * https://www.suse.com/security/cve/CVE-2026-56854.html * https://www.suse.com/security/cve/CVE-2026-56855.html * https://www.suse.com/security/cve/CVE-2026-56864.html * https://www.suse.com/security/cve/CVE-2026-56865.html * https://www.suse.com/security/cve/CVE-2026-63209.html * https://www.suse.com/security/cve/CVE-2026-78662.html * https://www.suse.com/security/cve/CVE-2026-81870.html * https://www.suse.com/security/cve/CVE-2026-81871.html * https://www.suse.com/security/cve/CVE-2026-81872.html * https://www.suse.com/security/cve/CVE-2026-85732.html * https://bugzilla.suse.com/show_bug.cgi?id=1261935 * https://bugzilla.suse.com/show_bug.cgi?id=1261938 * https://bugzilla.suse.com/show_bug.cgi?id=1261939 * https://bugzilla.suse.com/show_bug.cgi?id=1265428 * https://bugzilla.suse.com/show_bug.cgi?id=1265758 * https://bugzilla.suse.com/show_bug.cgi?id=1270127 * https://bugzilla.suse.com/show_bug.cgi?id=1271660 * https://bugzilla.suse.com/show_bug.cgi?id=1271997 * https://bugzilla.suse.com/show_bug.cgi?id=1275024 * https://bugzilla.suse.com/show_bug.cgi?id=1275025 * https://bugzilla.suse.com/show_bug.cgi?id=1276327 * https://bugzilla.suse.com/show_bug.cgi?id=1276510 * https://bugzilla.suse.com/show_bug.cgi?id=1276514 * https://bugzilla.suse.com/show_bug.cgi?id=1281112 * https://bugzilla.suse.com/show_bug.cgi?id=1281426 * https://bugzilla.suse.com/show_bug.cgi?id=1281468 * https://bugzilla.suse.com/show_bug.cgi?id=1281469 * https://bugzilla.suse.com/show_bug.cgi?id=1283642 * https://bugzilla.suse.com/show_bug.cgi?id=1284104 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:17:11 -0000 Subject: SUSE-SU-2026:24281-1: important: Security update for glibc Message-ID: <179300623178.6825.1984347693508386619@3c67540d6a94> # Security update for glibc Announcement ID: SUSE-SU-2026:24281-1 Release Date: 2026-10-19T09:50:34Z Rating: important References: * bsc#1281297 * bsc#1282449 * bsc#1282509 * bsc#1283147 Cross-References: * CVE-2026-8674 * CVE-2026-86805 * CVE-2026-89092 * CVE-2026-97399 CVSS scores: * CVE-2026-8674 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-8674 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-8674 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86805 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L * CVE-2026-89092 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89092 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89092 ( NVD ): 4.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-97399 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97399 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97399 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Micro 6.1 An update that solves four vulnerabilities can now be installed. ## Description: This update for glibc fixes the following issues: * CVE-2026-8674: reachable assert in `resolv/resolv_conf.c:update_from_conf` allows an attacker in a local network to trigger a process crash (bsc#1281297). * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). * CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). * CVE-2026-97399: one byte out-of-bounds read via function `strncasecmp` on Power8 can lead to a program crash (bsc#1283147). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-751 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * glibc-debugsource-2.38-slfo.1.1_11.1 * glibc-devel-2.38-slfo.1.1_11.1 * glibc-locale-base-2.38-slfo.1.1_11.1 * glibc-locale-base-debuginfo-2.38-slfo.1.1_11.1 * glibc-locale-2.38-slfo.1.1_11.1 * glibc-devel-debuginfo-2.38-slfo.1.1_11.1 * glibc-debuginfo-2.38-slfo.1.1_11.1 * glibc-2.38-slfo.1.1_11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-8674.html * https://www.suse.com/security/cve/CVE-2026-86805.html * https://www.suse.com/security/cve/CVE-2026-89092.html * https://www.suse.com/security/cve/CVE-2026-97399.html * https://bugzilla.suse.com/show_bug.cgi?id=1281297 * https://bugzilla.suse.com/show_bug.cgi?id=1282449 * https://bugzilla.suse.com/show_bug.cgi?id=1282509 * https://bugzilla.suse.com/show_bug.cgi?id=1283147 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:17:27 -0000 Subject: SUSE-SU-2026:24280-1: important: Security update for python311 Message-ID: <179300624713.6825.15299250208978840751@3c67540d6a94> # Security update for python311 Announcement ID: SUSE-SU-2026:24280-1 Release Date: 2026-10-19T09:44:33Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves seven vulnerabilities can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to 3.11.17: * Security * gh-158446: Fix a crash or incorrect output that could occur when formatting a float or complex with a precision close to the platform's INT_MAX. PyOS_double_to_string() now raises ValueError for any precision of that magnitude, regardless of presentation type or value, as the format string parsers already did for precisions above INT_MAX. * gh-157190: Fixed a vulnerability in the tarfile data and tar extraction filters where a crafted archive using a hard link to a symbolic link could change the permissions and modification time of a file outside the destination directory, and expose its contents inside the extracted tree. This addresses CVE 2026-82049. (bsc#1280459, CVE-2026-82049) * gh-156793: asyncio: loop.start_tls() and loop.create_connection() now validate the server_hostname argument if an ssl.SSLContext is passed with check_hostname set to True, emitting DeprecationWarning if server_hostname is missing. (This will raise ValueError in Python 3.13 and later.) (bsc#1283826, CVE-2026-19553) * gh-156793: ssl.SSLContext.wrap_bio() now validates its server_side, server_hostname and session arguments similar to ssl.SSLContext.wrap_socket(), but for backward compatiblity reasons emits DeprecationWarning instead of ValueError. In particular, a context with check_hostname enabled and no server_hostname passed to wrap_bio() now emits DeprecationWarning to indicate the hostname wasn't checked. (In Python 3.13 and later, this raises ValueError.) * gh-157265: In tarfile, when extracting a link falls back to extracting a member of the archive, skip the member when the filter function returns None when called with the extracted member's name replaced with the link's. * gh-157953: Update bundled libexpat to version 2.8.5. * gh-156002: Bound the amount of data zipfile decompresses per read for members compressed with bzip2, LZMA, or Zstandard, matching the existing limit for deflate. A small archive member could previously expand into an unbounded allocation even when read in small chunks. (bsc#1277111, CVE-2026-15310) * gh-155999: Fix the tarfile tar and data extraction filters creating directories outside the destination for members whose name leaves the destination and returns to it, such as ../evil/../dest/sub/file. The containment check used the resolved path, but intermediate directories were created from the name as given. (bsc#1276227, CVE-2026-19672) * gh-156293: Fix a crash in ssl when an sni_callback switches a connection to another SSLContext and the context that carries the callback is no longer referenced by the application. Servers that keep their sni_callback context alive (the usual case when it wraps the listening socket or is stored on the server object) were not affected. This addresses CVE-2026-19445. (bsc#1283969, CVE-2026-19445) * gh-155292: Change the stringprep module and encodings.idna codec to not consider Unicode codepoint attributes beyond those defined in RFC 3454. (bsc#1276226, CVE-2026-17084) * gh-155694: Fix CVE-2026-15806 by scoping HTTPPasswordMgr credentials to the URL scheme, preventing credentials stored for an HTTPS URL from being used for a matching HTTP URL, while URIs without a scheme continue to match any scheme. (bsc#1276223, CVE-2026-15806) * Library * gh-156002: zipfile again reads members through a third-party decompressor installed by monkey-patching the private _get_decompressor() to return an object that only implements old BZ2Decompressor API from Python 3.3. Note that decompressors without needs_input and two-argument decompress() are vulnerable to CVE 2026-15310. * gh-156353: Fix configparser parsing when using whitespace in delimiters. * Build * gh-155757: Set the --argv0 argument to wasmtime for WASI builds so the test suite passes. Otherwise the calculated paths to the stdlib for frozen modules is incorrect. * CVE-2026-15310: bound zipfile decompression for bzip2/LZMA (bsc#1277111, gh#python/cpython#156002) * CVE-2026-19672: in tarfile, handle a member that leaves the destination and comes back (bsc#1276227, gh#python/cpython#156000) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-750 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * python311-curses-debuginfo-3.11.17-slfo.1.1_1.1 * python311-base-3.11.17-slfo.1.1_1.1 * python311-debuginfo-3.11.17-slfo.1.1_1.1 * libpython3_11-1_0-debuginfo-3.11.17-slfo.1.1_1.1 * python311-3.11.17-slfo.1.1_1.1 * python311-core-debugsource-3.11.17-slfo.1.1_1.1 * libpython3_11-1_0-3.11.17-slfo.1.1_1.1 * python311-curses-3.11.17-slfo.1.1_1.1 * python311-base-debuginfo-3.11.17-slfo.1.1_1.1 * python311-debugsource-3.11.17-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:17:49 -0000 Subject: SUSE-SU-2026:24279-1: important: Security update for docker Message-ID: <179300626978.6825.17491041911304202749@3c67540d6a94> # Security update for docker Announcement ID: SUSE-SU-2026:24279-1 Release Date: 2026-10-19T09:19:11Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266176 * bsc#1266625 * bsc#1267827 * bsc#1268280 * bsc#1268359 * bsc#1271209 * bsc#1278193 Cross-References: * CVE-2026-31431 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves five vulnerabilities and has six fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at fixes(bsc#1268280, bsc#1268359, bsc#1271209, bsc#1266176) * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-755 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * docker-29.7.2_ce-slfo.1.1_11.1 * docker-buildx-0.36.1-slfo.1.1_11.1 * docker-debuginfo-29.7.2_ce-slfo.1.1_11.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31431.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266176 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1268280 * https://bugzilla.suse.com/show_bug.cgi?id=1268359 * https://bugzilla.suse.com/show_bug.cgi?id=1271209 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:17:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:17:56 -0000 Subject: SUSE-SU-2026:24278-1: important: Security update for wpa_supplicant Message-ID: <179300627667.6825.3235769820268684811@3c67540d6a94> # Security update for wpa_supplicant Announcement ID: SUSE-SU-2026:24278-1 Release Date: 2026-10-19T09:14:25Z Rating: important References: * bsc#1280914 Cross-References: * CVE-2026-78807 CVSS scores: * CVE-2026-78807 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-78807 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78807 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for wpa_supplicant fixes the following issue: * CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-753 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * wpa_supplicant-debuginfo-2.11-slfo.1.1_3.1 * wpa_supplicant-debugsource-2.11-slfo.1.1_3.1 * wpa_supplicant-2.11-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-78807.html * https://bugzilla.suse.com/show_bug.cgi?id=1280914 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:18:04 -0000 Subject: SUSE-SU-2026:24277-1: important: Security update for google-osconfig-agent Message-ID: <179300628465.6825.11163966056448442902@3c67540d6a94> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24277-1 Release Date: 2026-10-19T09:13:25Z Rating: important References: * bsc#1283672 Cross-References: * CVE-2026-63209 CVSS scores: * CVE-2026-63209 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63209 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63209 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for google-osconfig-agent fixes the following issue: * CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict() allows an attacker to bypass repeat index validation and cause a process crash (bsc#1283672). Changes for google-osconfig-agent: * Update to version 20260928.01 * scalibr linux new metadata support (#1038) * Fix failing to report REBOOTING state during postPatchReboot due to context canceled for Windows VMs (#1055) * Fix os/snap extractor usage (#1053) * Update github.com/klauspost/compress to v1.18.7 (bsc#1283672, CVE-2026-63209) * bump grpc package to new version (#1057) * bump some dependencies across few modules (#1056) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-752 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * google-osconfig-agent-debuginfo-20260928.01-slfo.1.1_1.1 * google-osconfig-agent-20260928.01-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63209.html * https://bugzilla.suse.com/show_bug.cgi?id=1283672 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:18:18 -0000 Subject: SUSE-SU-2026:24275-1: important: Security update for rpcbind Message-ID: <179300629873.6825.14441021880586813809@3c67540d6a94> # Security update for rpcbind Announcement ID: SUSE-SU-2026:24275-1 Release Date: 2026-10-19T09:11:24Z Rating: important References: * bsc#1282326 Cross-References: * CVE-2026-94640 CVSS scores: * CVE-2026-94640 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94640 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-94640 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for rpcbind fixes the following issue: * CVE-2026-94640: unbounded memory allocation in statistics tracking allows for unauthenticated remote denial of service (bsc#1282326). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-747 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * rpcbind-1.2.9-slfo.1.1_3.1 * rpcbind-debugsource-1.2.9-slfo.1.1_3.1 * rpcbind-debuginfo-1.2.9-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-94640.html * https://bugzilla.suse.com/show_bug.cgi?id=1282326 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:18:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:18:52 -0000 Subject: SUSE-SU-2026:24273-1: important: Security update for openssl-3 Message-ID: <179300633280.6825.12116492801105215408@3c67540d6a94> # Security update for openssl-3 Announcement ID: SUSE-SU-2026:24273-1 Release Date: 2026-10-19T09:10:07Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1280587 * bsc#1280589 * bsc#1280591 * bsc#1280596 * bsc#1280597 * bsc#1280598 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 Cross-References: * CVE-2026-102010 * CVE-2026-35189 * CVE-2026-54872 * CVE-2026-75805 * CVE-2026-75806 * CVE-2026-77696 * CVE-2026-84782 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-35189 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-35189 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-35189 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-54872 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-54872 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-54872 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75805 ( SUSE ): 5.1 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-75805 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75805 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-75806 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77696 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-77696 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-77696 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-84782 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-84782 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-84782 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves seven vulnerabilities, contains two features and has seven fixes can now be installed. ## Security update for openssl-3 ### Description: This update for openssl-3 fixes the following issues: * CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing (bsc#1280589). * CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (bsc#1280591). * CVE-2026-75805: NULL Pointer Dereference in CMP Client Revocation Response Handling (bsc#1280596). * CVE-2026-75806: Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (bsc#1280597). * CVE-2026-77696: Timing Side-Channel in SM2 Signature Generation (bsc#1280598). * CVE-2026-84782: DTLS Retransmits Handshake Messages From a Stale Buffer Offset (bsc#1280587). ## Security update for gcc13 ### Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 * Update to gcc-13 branch head, 3c92f70d174a1bc9a4bfb866d, git10509 * GCC 13.5 release candidate when a PCH is used * pulls fix for haproxy build [bsc#1267998] * pulls build fixes for libcody when using a C++20 defaulting host compiler ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-757 * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-756 ## Package List: * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * gcc13-13.5.0+git10516-slfo.1.1_1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-slfo.1.1_1.1 * gcc13-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * cpp13-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * gcc13-debugsource-13.5.0+git10516-slfo.1.1_1.1 * gcc13-c++-13.5.0+git10516-slfo.1.1_1.1 * gcc13-c++-debuginfo-13.5.0+git10516-slfo.1.1_1.1 * cpp13-13.5.0+git10516-slfo.1.1_1.1 * gcc13-PIE-13.5.0+git10516-slfo.1.1_1.1 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * libopenssl3-debuginfo-3.1.4-slfo.1.1_14.1 * openssl-3-debugsource-3.1.4-slfo.1.1_14.1 * openssl-3-3.1.4-slfo.1.1_14.1 * libopenssl-3-fips-provider-3.1.4-slfo.1.1_14.1 * libopenssl-3-devel-3.1.4-slfo.1.1_14.1 * libopenssl3-3.1.4-slfo.1.1_14.1 * openssl-3-debuginfo-3.1.4-slfo.1.1_14.1 * libopenssl-3-fips-provider-debuginfo-3.1.4-slfo.1.1_14.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://www.suse.com/security/cve/CVE-2026-35189.html * https://www.suse.com/security/cve/CVE-2026-54872.html * https://www.suse.com/security/cve/CVE-2026-75805.html * https://www.suse.com/security/cve/CVE-2026-75806.html * https://www.suse.com/security/cve/CVE-2026-77696.html * https://www.suse.com/security/cve/CVE-2026-84782.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1280587 * https://bugzilla.suse.com/show_bug.cgi?id=1280589 * https://bugzilla.suse.com/show_bug.cgi?id=1280591 * https://bugzilla.suse.com/show_bug.cgi?id=1280596 * https://bugzilla.suse.com/show_bug.cgi?id=1280597 * https://bugzilla.suse.com/show_bug.cgi?id=1280598 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:19:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:19:01 -0000 Subject: SUSE-SU-2026:4902-1: important: Security update for container-suseconnect Message-ID: <179300634127.6825.14910757614897631461@3c67540d6a94> # Security update for container-suseconnect Announcement ID: SUSE-SU-2026:4902-1 Release Date: 2026-10-24T19:35:37Z Rating: important References: Affected Products: * Containers Module 15-SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for container-suseconnect rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4902 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4902 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4902 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4902 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4902 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4902 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4902 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4902 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4902 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4902 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4902 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * container-suseconnect-2.6.0-150000.4.99.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 09:19:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 09:19:06 -0000 Subject: SUSE-SU-2026:4901-1: important: Security update for kubernetes Message-ID: <179300634643.6825.7691938125913315356@3c67540d6a94> # Security update for kubernetes Announcement ID: SUSE-SU-2026:4901-1 Release Date: 2026-10-24T19:34:12Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4901 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4901 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-common-1.37.0-150600.13.47.1 * kubernetes1.37-client-1.37.0-150600.13.47.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.47.1 * kubernetes1.37-client-fish-completion-1.37.0-150600.13.47.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.37-client-common-1.37.0-150600.13.47.1 * kubernetes1.37-client-1.37.0-150600.13.47.1 * Containers Module 15-SP7 (noarch) * kubernetes1.37-client-bash-completion-1.37.0-150600.13.47.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 12:30:32 -0000 Subject: SUSE-SU-2026:4909-1: important: Security update for squid Message-ID: <179301783256.6919.12881534767084477294@f5dd93353bb2> # Security update for squid Announcement ID: SUSE-SU-2026:4909-1 Release Date: 2026-10-26T07:22:13Z Rating: important References: * bsc#1216496 * bsc#1217825 * bsc#1223329 * bsc#1228150 * bsc#1252281 * bsc#1260452 * bsc#1260453 * bsc#1260454 * bsc#1268272 * bsc#1268320 Cross-References: * CVE-2023-49288 * CVE-2023-5824 * CVE-2025-62168 * CVE-2026-32748 * CVE-2026-33515 * CVE-2026-33526 * CVE-2026-47729 * CVE-2026-50012 CVSS scores: * CVE-2023-49288 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-49288 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-5824 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-62168 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2025-62168 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N * CVE-2025-62168 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2025-62168 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N * CVE-2026-32748 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32748 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32748 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33515 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-33515 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-33515 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33515 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-33526 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-33526 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33526 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47729 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-47729 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-50012 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-50012 ( NVD ): 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities and has two security fixes can now be installed. ## Description: This update for squid fixes the following issues: * CVE-2023-5824: Multiple issues in HTTP response caching (bsc#1216496). * CVE-2023-49288: Use-After-Free in the HTTP Collapsed Forwarding Feature (bsc#1217825). * CVE-2025-62168: failure to redact HTTP authentication credentials in error handling leads to the disclosure of credentials a trusted client uses to authenticate (bsc#1252281). * CVE-2026-32748: denial of service in ICP Request handling (bsc#1260453). * CVE-2026-33515: out of bounds read in ICP message handling (bsc#1260454). * CVE-2026-33526: denial of service in ICP Request handling (bsc#1260452). * CVE-2026-47729: out-of-bounds read attack against the ftp gateway due to a improper validation of syntactic correctness of input (bsc#1268272). * CVE-2026-50012: Improper Input Validation bug (bsc#1268320). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4909 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4909 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4909 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4909 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4909 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4909 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4909 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4909 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4909 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * squid-5.7-150400.3.41.1 * squid-debuginfo-5.7-150400.3.41.1 * squid-debugsource-5.7-150400.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2023-49288.html * https://www.suse.com/security/cve/CVE-2023-5824.html * https://www.suse.com/security/cve/CVE-2025-62168.html * https://www.suse.com/security/cve/CVE-2026-32748.html * https://www.suse.com/security/cve/CVE-2026-33515.html * https://www.suse.com/security/cve/CVE-2026-33526.html * https://www.suse.com/security/cve/CVE-2026-47729.html * https://www.suse.com/security/cve/CVE-2026-50012.html * https://bugzilla.suse.com/show_bug.cgi?id=1216496 * https://bugzilla.suse.com/show_bug.cgi?id=1217825 * https://bugzilla.suse.com/show_bug.cgi?id=1223329 * https://bugzilla.suse.com/show_bug.cgi?id=1228150 * https://bugzilla.suse.com/show_bug.cgi?id=1252281 * https://bugzilla.suse.com/show_bug.cgi?id=1260452 * https://bugzilla.suse.com/show_bug.cgi?id=1260453 * https://bugzilla.suse.com/show_bug.cgi?id=1260454 * https://bugzilla.suse.com/show_bug.cgi?id=1268272 * https://bugzilla.suse.com/show_bug.cgi?id=1268320 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 12:30:47 -0000 Subject: SUSE-SU-2026:4907-1: important: Security update for openssh8.4 Message-ID: <179301784722.6919.5656707116059769852@f5dd93353bb2> # Security update for openssh8.4 Announcement ID: SUSE-SU-2026:4907-1 Release Date: 2026-10-26T07:21:10Z Rating: important References: * bsc#1271044 * bsc#1271048 * bsc#1271049 * bsc#1271052 * bsc#1271053 * bsc#1271054 * bsc#1271055 Cross-References: * CVE-2026-59995 * CVE-2026-59997 * CVE-2026-59998 * CVE-2026-59999 * CVE-2026-60000 * CVE-2026-60001 * CVE-2026-60002 CVSS scores: * CVE-2026-59995 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59995 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59997 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59997 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59998 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59998 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59999 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-59999 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-60000 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-60000 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-60001 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-60001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60002 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-60002 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves seven vulnerabilities can now be installed. ## Description: This update for openssh8.4 fixes the following issues: * CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). * CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). * CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). * CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). * CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). * CVE-2026-60001: sshd: honor the minimum authentication delay (bsc#1271054). * CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange (bsc#1271055). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4907 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4907 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * openssh8.4-clients-8.4p1-8.30.1 * openssh8.4-debugsource-8.4p1-8.30.1 * openssh8.4-server-debuginfo-8.4p1-8.30.1 * openssh8.4-clients-debuginfo-8.4p1-8.30.1 * openssh8.4-common-8.4p1-8.30.1 * openssh8.4-8.4p1-8.30.1 * openssh8.4-helpers-8.4p1-8.30.1 * openssh8.4-fips-8.4p1-8.30.1 * openssh8.4-helpers-debuginfo-8.4p1-8.30.1 * openssh8.4-common-debuginfo-8.4p1-8.30.1 * openssh8.4-server-8.4p1-8.30.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * openssh8.4-clients-8.4p1-8.30.1 * openssh8.4-debugsource-8.4p1-8.30.1 * openssh8.4-server-debuginfo-8.4p1-8.30.1 * openssh8.4-clients-debuginfo-8.4p1-8.30.1 * openssh8.4-common-8.4p1-8.30.1 * openssh8.4-8.4p1-8.30.1 * openssh8.4-helpers-8.4p1-8.30.1 * openssh8.4-fips-8.4p1-8.30.1 * openssh8.4-helpers-debuginfo-8.4p1-8.30.1 * openssh8.4-common-debuginfo-8.4p1-8.30.1 * openssh8.4-server-8.4p1-8.30.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59995.html * https://www.suse.com/security/cve/CVE-2026-59997.html * https://www.suse.com/security/cve/CVE-2026-59998.html * https://www.suse.com/security/cve/CVE-2026-59999.html * https://www.suse.com/security/cve/CVE-2026-60000.html * https://www.suse.com/security/cve/CVE-2026-60001.html * https://www.suse.com/security/cve/CVE-2026-60002.html * https://bugzilla.suse.com/show_bug.cgi?id=1271044 * https://bugzilla.suse.com/show_bug.cgi?id=1271048 * https://bugzilla.suse.com/show_bug.cgi?id=1271049 * https://bugzilla.suse.com/show_bug.cgi?id=1271052 * https://bugzilla.suse.com/show_bug.cgi?id=1271053 * https://bugzilla.suse.com/show_bug.cgi?id=1271054 * https://bugzilla.suse.com/show_bug.cgi?id=1271055 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:30:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 12:30:54 -0000 Subject: SUSE-SU-2026:4906-1: moderate: Security update for krb5 Message-ID: <179301785464.6919.13024666928179872514@f5dd93353bb2> # Security update for krb5 Announcement ID: SUSE-SU-2026:4906-1 Release Date: 2026-10-26T07:20:54Z Rating: moderate References: * bsc#1284816 * bsc#1284817 Cross-References: * CVE-2026-107708 * CVE-2026-107778 CVSS scores: * CVE-2026-107708 ( SUSE ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107708 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107708 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107778 ( NVD ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-107778 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves two vulnerabilities can now be installed. ## Description: This update for krb5 fixes the following issues: * CVE-2026-107708: Denial of Service via malformed PAC in S4U2Proxy requests (bsc#1284816). * CVE-2026-107778: Denial of Service via crafted forwarded credentials (bsc#1284817). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4906 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4906 ## Package List: * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * krb5-plugin-kdb-ldap-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-1.20.1-150500.3.26.1 * krb5-plugin-preauth-otp-1.20.1-150500.3.26.1 * krb5-mini-debugsource-1.20.1-150500.3.26.1 * krb5-server-debuginfo-1.20.1-150500.3.26.1 * krb5-server-1.20.1-150500.3.26.1 * krb5-debugsource-1.20.1-150500.3.26.1 * krb5-plugin-preauth-pkinit-1.20.1-150500.3.26.1 * krb5-client-debuginfo-1.20.1-150500.3.26.1 * krb5-client-1.20.1-150500.3.26.1 * krb5-plugin-preauth-pkinit-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-devel-1.20.1-150500.3.26.1 * krb5-debuginfo-1.20.1-150500.3.26.1 * krb5-mini-debuginfo-1.20.1-150500.3.26.1 * krb5-plugin-preauth-otp-debuginfo-1.20.1-150500.3.26.1 * krb5-1.20.1-150500.3.26.1 * krb5-plugin-preauth-spake-1.20.1-150500.3.26.1 * krb5-plugin-preauth-spake-debuginfo-1.20.1-150500.3.26.1 * krb5-plugin-kdb-ldap-1.20.1-150500.3.26.1 * krb5-devel-1.20.1-150500.3.26.1 * openSUSE Leap 15.5 (x86_64) * krb5-32bit-1.20.1-150500.3.26.1 * krb5-devel-32bit-1.20.1-150500.3.26.1 * krb5-32bit-debuginfo-1.20.1-150500.3.26.1 * openSUSE Leap 15.5 (aarch64_ilp32) * krb5-devel-64bit-1.20.1-150500.3.26.1 * krb5-64bit-1.20.1-150500.3.26.1 * krb5-64bit-debuginfo-1.20.1-150500.3.26.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * krb5-1.20.1-150500.3.26.1 * krb5-client-1.20.1-150500.3.26.1 * krb5-debugsource-1.20.1-150500.3.26.1 * krb5-debuginfo-1.20.1-150500.3.26.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107708.html * https://www.suse.com/security/cve/CVE-2026-107778.html * https://bugzilla.suse.com/show_bug.cgi?id=1284816 * https://bugzilla.suse.com/show_bug.cgi?id=1284817 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 12:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 12:31:04 -0000 Subject: SUSE-SU-2026:4904-1: important: Security update for python, python-base, python-doc Message-ID: <179301786485.6919.1301320151274384742@f5dd93353bb2> # Security update for python, python-base, python-doc Announcement ID: SUSE-SU-2026:4904-1 Release Date: 2026-10-26T07:20:20Z Rating: important References: * bsc#1280459 * bsc#1285433 Cross-References: * CVE-2026-82049 CVSS scores: * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python, python-base, python-doc fixes the following issue: * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4904 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4904 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * python-devel-2.7.18-33.93.1 * python-base-debugsource-2.7.18-33.93.1 * python-gdbm-2.7.18-33.93.1 * python-tk-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-2.7.18-33.93.1 * python-idle-2.7.18-33.93.1 * python-demo-2.7.18-33.93.1 * python-2.7.18-33.93.1 * python-curses-2.7.18-33.93.1 * python-base-2.7.18-33.93.1 * python-debugsource-2.7.18-33.93.1 * python-debuginfo-2.7.18-33.93.1 * python-gdbm-debuginfo-2.7.18-33.93.1 * python-xml-debuginfo-2.7.18-33.93.1 * python-tk-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-2.7.18-33.93.1 * python-curses-debuginfo-2.7.18-33.93.1 * python-xml-2.7.18-33.93.1 * python-base-debuginfo-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (s390x x86_64) * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.93.1 * python-32bit-2.7.18-33.93.1 * python-debuginfo-32bit-2.7.18-33.93.1 * libpython2_7-1_0-32bit-2.7.18-33.93.1 * python-base-debuginfo-32bit-2.7.18-33.93.1 * python-base-32bit-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * python-doc-pdf-2.7.18-33.93.1 * python-doc-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python-32bit-2.7.18-33.93.1 * python-devel-2.7.18-33.93.1 * python-base-debugsource-2.7.18-33.93.1 * python-gdbm-2.7.18-33.93.1 * python-tk-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-2.7.18-33.93.1 * python-idle-2.7.18-33.93.1 * python-demo-2.7.18-33.93.1 * python-2.7.18-33.93.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.93.1 * python-curses-2.7.18-33.93.1 * python-base-2.7.18-33.93.1 * python-debugsource-2.7.18-33.93.1 * python-debuginfo-2.7.18-33.93.1 * python-debuginfo-32bit-2.7.18-33.93.1 * python-gdbm-debuginfo-2.7.18-33.93.1 * python-xml-debuginfo-2.7.18-33.93.1 * python-base-debuginfo-32bit-2.7.18-33.93.1 * python-tk-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-2.7.18-33.93.1 * python-curses-debuginfo-2.7.18-33.93.1 * libpython2_7-1_0-32bit-2.7.18-33.93.1 * python-xml-2.7.18-33.93.1 * python-base-debuginfo-2.7.18-33.93.1 * python-base-32bit-2.7.18-33.93.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * python-doc-pdf-2.7.18-33.93.1 * python-doc-2.7.18-33.93.1 ## References: * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:30:09 -0000 Subject: SUSE-SU-2026:24362-1: important: Security update for cpupower Message-ID: <179303220940.6105.10329209885969687731@c9d35c2308c0> # Security update for cpupower Announcement ID: SUSE-SU-2026:24362-1 Release Date: 2026-10-22T16:03:55Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663) * turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes) * cpupower: Reset errno before strtoull() (stable-fixes) * intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes) * cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes) * cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes) * cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes) * turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes) * turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes) * turbostat: Handle cap_get_proc() ENOSYS (stable-fixes) * turbostat: Fix build with musl (stable-fixes) * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes) * power turbostat: Fix bogus SysWatt for forked program (git-fixes) * cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1959 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1959 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cpupower-6.12.0-160000.3.1 * cpupower-bench-debuginfo-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 * cpupower-devel-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-bench-6.12.0-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * cpupower-bash-completion-6.12.0-160000.3.1 * cpupower-lang-6.12.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * cpupower-6.12.0-160000.3.1 * cpupower-bench-debuginfo-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 * cpupower-devel-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-bench-6.12.0-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * cpupower-bash-completion-6.12.0-160000.3.1 * cpupower-lang-6.12.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:30:17 -0000 Subject: SUSE-SU-2026:24361-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179303221766.6105.13511958780187793809@c9d35c2308c0> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24361-1 Release Date: 2026-10-22T09:39:59Z Rating: moderate References: * bsc#1286261 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1958 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1958 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.92-160000.1.4 * ca-certificates-mozilla-2.92-160000.1.1 * SUSE Linux Enterprise Server 16.0 (noarch) * ca-certificates-mozilla-prebuilt-2.92-160000.1.4 * ca-certificates-mozilla-2.92-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1286261 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:30:30 -0000 Subject: SUSE-SU-2026:24360-1: important: Security update for go1.27 Message-ID: <179303223014.6105.11102026189880468074@c9d35c2308c0> # Security update for go1.27 Announcement ID: SUSE-SU-2026:24360-1 Release Date: 2026-10-21T21:25:38Z Rating: important References: * bsc#1272545 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for go1.27 fixes the following issues: Update to go 1.27.3 (bsc#1272545): * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1957 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1957 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.27-race-1.27.3-160000.1.1 * go1.27-1.27.3-160000.1.1 * go1.27-doc-1.27.3-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.27-race-1.27.3-160000.1.1 * go1.27-1.27.3-160000.1.1 * go1.27-doc-1.27.3-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://bugzilla.suse.com/show_bug.cgi?id=1272545 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:30:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:30:48 -0000 Subject: SUSE-SU-2026:24359-1: important: Security update for go1.26 Message-ID: <179303224836.6105.4688508806308488492@c9d35c2308c0> # Security update for go1.26 Announcement ID: SUSE-SU-2026:24359-1 Release Date: 2026-10-21T21:25:38Z Rating: important References: * bsc#1255111 * bsc#1284770 * bsc#1284772 * bsc#1286261 * bsc#1286317 Cross-References: * CVE-2026-111943 * CVE-2026-78663 * CVE-2026-78669 CVSS scores: * CVE-2026-111943 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-78663 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78663 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities and has two fixes can now be installed. ## Description: This update for go1.26 fixes the following issues: Update to go 1.26.10 (bsc#1255111): * CVE-2026-78663: net/http: double flow control refund on HTTP/2 server streams (bsc#1284770). * CVE-2026-78669: net/http: excessive CPU consumption from repeated initial window changes (bsc#1284772). * CVE-2026-111943: crypto/x509: mitigation for security concerns with a specific Certificate Authority (bsc#1286317, bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1956 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1956 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * go1.26-race-1.26.10-160000.1.1 * go1.26-1.26.10-160000.1.1 * go1.26-doc-1.26.10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * go1.26-race-1.26.10-160000.1.1 * go1.26-1.26.10-160000.1.1 * go1.26-doc-1.26.10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111943.html * https://www.suse.com/security/cve/CVE-2026-78663.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://bugzilla.suse.com/show_bug.cgi?id=1255111 * https://bugzilla.suse.com/show_bug.cgi?id=1284770 * https://bugzilla.suse.com/show_bug.cgi?id=1284772 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286317 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:31:00 -0000 Subject: SUSE-SU-2026:4913-1: important: Security update for gcc7 Message-ID: <179303226043.6105.9887708770433770773@c9d35c2308c0> # Security update for gcc7 Announcement ID: SUSE-SU-2026:4913-1 Release Date: 2026-10-26T11:06:04Z Rating: important References: * bsc#1239566 * bsc#1267946 * bsc#1282500 * bsc#1283123 Cross-References: * CVE-2026-102010 * CVE-2026-95619 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-95619 ( SUSE ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-95619 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves two vulnerabilities and has two security fixes can now be installed. ## Description: This update for gcc7 fixes the following issues: * CVE-2026-95619: libstdc++ integer overflow in `new` operator (bsc#1282500). * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4913 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4913 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4913 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4913 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4913 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4913 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4913 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4913 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4913 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4913 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4913 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4913 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libgfortran4-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * Basesystem Module 15-SP7 (x86_64) * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * Development Tools Module 15-SP7 (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * cpp7-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-locale-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-objc-7.5.0+r278197-150000.4.49.1 * gcc7-objc-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-debuginfo-7.5.0+r278197-150000.4.49.1 * libubsan0-7.5.0+r278197-150000.4.49.1 * cpp7-7.5.0+r278197-150000.4.49.1 * gcc7-c++-7.5.0+r278197-150000.4.49.1 * gcc7-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-7.5.0+r278197-150000.4.49.1 * libubsan0-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-7.5.0+r278197-150000.4.49.1 * gcc7-debugsource-7.5.0+r278197-150000.4.49.1 * libasan4-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-ada-7.5.0+r278197-150000.4.49.1 * gcc7-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-7.5.0+r278197-150000.4.49.1 * libgfortran4-debuginfo-7.5.0+r278197-150000.4.49.1 * libada7-debuginfo-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * gcc7-info-7.5.0+r278197-150000.4.49.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libasan4-32bit-7.5.0+r278197-150000.4.49.1 * libstdc++6-devel-gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libasan4-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * cross-nvptx-gcc7-7.5.0+r278197-150000.4.49.1 * libubsan0-32bit-debuginfo-7.5.0+r278197-150000.4.49.1 * libgfortran4-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-fortran-32bit-7.5.0+r278197-150000.4.49.1 * cross-nvptx-newlib7-devel-7.5.0+r278197-150000.4.49.1 * libcilkrts5-debuginfo-7.5.0+r278197-150000.4.49.1 * gcc7-c++-32bit-7.5.0+r278197-150000.4.49.1 * gcc7-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-32bit-7.5.0+r278197-150000.4.49.1 * libcilkrts5-7.5.0+r278197-150000.4.49.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://www.suse.com/security/cve/CVE-2026-95619.html * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1267946 * https://bugzilla.suse.com/show_bug.cgi?id=1282500 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:31:05 -0000 Subject: SUSE-SU-2026:4912-1: important: Security update for kubernetes-old Message-ID: <179303226545.6105.4783665191925070830@c9d35c2308c0> # Security update for kubernetes-old Announcement ID: SUSE-SU-2026:4912-1 Release Date: 2026-10-26T09:46:57Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for kubernetes-old rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4912 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4912 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.46.1 * kubernetes1.35-client-1.35.8-150600.13.46.1 * openSUSE Leap 15.6 (noarch) * kubernetes1.35-client-fish-completion-1.35.8-150600.13.46.1 * kubernetes1.35-client-bash-completion-1.35.8-150600.13.46.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kubernetes1.35-client-common-1.35.8-150600.13.46.1 * kubernetes1.35-client-1.35.8-150600.13.46.1 * Containers Module 15-SP7 (noarch) * kubernetes1.35-client-bash-completion-1.35.8-150600.13.46.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 16:31:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 16:31:10 -0000 Subject: SUSE-SU-2026:4911-1: important: Security update for runc Message-ID: <179303227048.6105.4697357240935795033@c9d35c2308c0> # Security update for runc Announcement ID: SUSE-SU-2026:4911-1 Release Date: 2026-10-26T09:08:07Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for runc rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4911 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4911 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4911 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4911 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4911 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4911 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4911 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4911 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4911 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4911 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4911 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4911 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4911 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4911 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4911 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4911 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4911 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * runc-debuginfo-1.3.6-150000.105.1 * runc-1.3.6-150000.105.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:17 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 20:32:17 -0000 Subject: SUSE-SU-2026:24364-1: important: Security update for the Linux Kernel Message-ID: <179304673786.8149.13902262607398702200@9bf698548bc1> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24364-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-kernel-719 ## Package List: * SUSE Linux Micro Extras 6.0 (nosrc) * kernel-64kb-6.4.0-159998.54.1 * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (aarch64) * kernel-64kb-devel-6.4.0-159998.54.1 * kernel-64kb-debugsource-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * kernel-obs-build-6.4.0-159998.54.1 * kernel-syms-6.4.0-159998.54.1 * kernel-default-devel-6.4.0-159998.54.1 * kernel-obs-build-debugsource-6.4.0-159998.54.1 * kernel-default-debugsource-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.0 (x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 20:32:34 -0000 Subject: SUSE-SU-2026:24363-1: important: Security update for gcc13 Message-ID: <179304675444.8149.15576751976169337780@9bf698548bc1> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24363-1 Release Date: 2026-10-20T11:29:36Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1238491 * bsc#1239566 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 * jsc#PED-7395 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 * SUSE Linux Micro Extras 6.0 An update that solves one vulnerability, contains three features and has nine fixes can now be installed. ## Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.0 zypper in -t patch SUSE-SLE-Micro-Extras-6.0-941 ## Package List: * SUSE Linux Micro Extras 6.0 (aarch64 s390x x86_64) * libtsan2-13.5.0+git10516-159998.1.1 * cpp13-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-c++-debuginfo-13.5.0+git10516-159998.1.1 * libtsan2-debuginfo-13.5.0+git10516-159998.1.1 * libstdc++6-devel-gcc13-13.5.0+git10516-159998.1.1 * libubsan1-13.5.0+git10516-159998.1.1 * gcc13-debuginfo-13.5.0+git10516-159998.1.1 * libubsan1-debuginfo-13.5.0+git10516-159998.1.1 * libitm1-debuginfo-13.5.0+git10516-159998.1.1 * liblsan0-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-PIE-13.5.0+git10516-159998.1.1 * cpp13-13.5.0+git10516-159998.1.1 * gcc13-debugsource-13.5.0+git10516-159998.1.1 * gcc13-13.5.0+git10516-159998.1.1 * libasan8-debuginfo-13.5.0+git10516-159998.1.1 * libasan8-13.5.0+git10516-159998.1.1 * libitm1-13.5.0+git10516-159998.1.1 * gcc13-c++-13.5.0+git10516-159998.1.1 * liblsan0-13.5.0+git10516-159998.1.1 * SUSE Linux Micro Extras 6.0 (aarch64 x86_64) * libhwasan0-debuginfo-13.5.0+git10516-159998.1.1 * libhwasan0-13.5.0+git10516-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1238491 * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 * https://jira.suse.com/browse/PED-7395 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Mon Oct 26 20:32:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Mon, 26 Oct 2026 20:32:41 -0000 Subject: SUSE-SU-2026:4915-1: important: Security update for rekor Message-ID: <179304676189.8149.13819397799246033264@9bf698548bc1> # Security update for rekor Announcement ID: SUSE-SU-2026:4915-1 Release Date: 2026-10-26T14:43:30Z Rating: important References: Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.4 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for rekor rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4915 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4915 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4915 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4915 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4915 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4915 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4915 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4915 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4915 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4915 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4915 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4915 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.42.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * rekor-1.4.3-150400.4.42.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * rekor-debuginfo-1.4.3-150400.4.42.1 * rekor-1.4.3-150400.4.42.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:30:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:30:24 -0000 Subject: SUSE-SU-2026:24383-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179308982405.8521.6070674134525200781@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24383-1 Release Date: 2026-10-23T13:54:54Z Rating: moderate References: * bsc#1279961 * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability and has two fixes can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issues: Updated to 2.92 state (bsc#1286261 bsc#1287180 CVE-2026-114406) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 Updated to 2.90 state (bsc#1279961) Removed: * AffirmTrust Commercial * AffirmTrust Networking * AffirmTrust Premium * AffirmTrust Premium ECC * certSIGN ROOT CA * Entrust Root Certification Authority * PKI Root Certification Authority * FIRMAPROFESIONAL CA ROOT-A WEB * GLOBALTRUST 2020 * Secure Global CA * SecureSign Root CA12 * SecureTrust CA * TeliaSonera Root CA v1 * Trustwave Global Certification Authority * Trustwave Global ECC P256 Certification Authority * Trustwave Global ECC P384 Certification Authority * XRamp Global Certification Authority Added: * SECOM SMIME RSA Root CA 2024 * SECOM TLS ECC Root CA 2024 * SECOM TLS RSA Root CA 2024 * SecureSign Root CA16 * Telia EC Email Root CA v3 * Telia EC TLS Root CA v3 * Telia RSA Email Root CA v3 * Telia RSA TLS Root CA v3 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-762 ## Package List: * SUSE Linux Micro 6.1 (noarch) * ca-certificates-mozilla-2.92-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1279961 * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:30:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:30:53 -0000 Subject: SUSE-SU-2026:24382-1: important: Security update for openssh Message-ID: <179308985361.8521.8778420661001232201@f5dd93353bb2> # Security update for openssh Announcement ID: SUSE-SU-2026:24382-1 Release Date: 2026-10-23T11:50:56Z Rating: important References: * bsc#1259462 * bsc#1271044 * bsc#1271046 * bsc#1271048 * bsc#1271049 * bsc#1271052 * bsc#1271053 * bsc#1271054 * bsc#1271055 * bsc#1275074 * bsc#1275075 * bsc#1275079 Cross-References: * CVE-2026-59995 * CVE-2026-59996 * CVE-2026-59997 * CVE-2026-59998 * CVE-2026-59999 * CVE-2026-60000 * CVE-2026-60001 * CVE-2026-60002 * CVE-2026-73281 * CVE-2026-73282 * CVE-2026-73283 CVSS scores: * CVE-2026-59995 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59995 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59995 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-59996 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59996 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L * CVE-2026-59997 ( SUSE ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59997 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59997 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-59998 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-59998 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59998 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-59999 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-59999 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-59999 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-60000 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-60000 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-60000 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-60001 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-60001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-60002 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-60002 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-60002 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-73281 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N * CVE-2026-73281 ( SUSE ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73281 ( NVD ): 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N * CVE-2026-73282 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-73282 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-73282 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73283 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73283 ( NVD ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 11 vulnerabilities and has one fix can now be installed. ## Description: This update for openssh fixes the following issues: * CVE-2026-59995: sftp: a malicious server could change the the location of downloaded files (bsc#1271044). * CVE-2026-59996: scp: a malicious server could write files to the parent directory of the intended target directory (bsc#1271046). * CVE-2026-59997: sshd: internal-sftp command lines are silently truncated after the 9th argument (bsc#1271048). * CVE-2026-59998: sshd: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory (bsc#1271049). * CVE-2026-59999: sshd: DisableForwarding=yes didn't override PermitTunnel=yes (bsc#1271052). * CVE-2026-60000: sshd: pre-authentication denial of service when GSSAPIAuthentication is enabled (bsc#1271053). * CVE-2026-60001: sshd: honor the minimum authentication delay (bsc#1271054). * CVE-2026-60002: ssh: client-side use-after-free when a server changes its host key during a key reexchange (bsc#1271055). * CVE-2026-73281: refused binding requests on locked SSH agents can allow destination restriction bypasses (bsc#1275075). * CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after-free (bsc#1275074). * CVE-2026-73283: unenforced restriction keywords on tunnel forwarding can allow administrative security policy bypasses (bsc#1275079). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-766 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * openssh-9.6p1-slfo.1.1_7.1 * openssh-server-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-server-config-rootlogin-9.6p1-slfo.1.1_7.1 * openssh-common-9.6p1-slfo.1.1_7.1 * openssh-common-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-debugsource-9.6p1-slfo.1.1_7.1 * openssh-clients-debuginfo-9.6p1-slfo.1.1_7.1 * openssh-server-9.6p1-slfo.1.1_7.1 * openssh-clients-9.6p1-slfo.1.1_7.1 * openssh-fips-9.6p1-slfo.1.1_7.1 ## References: * https://www.suse.com/security/cve/CVE-2026-59995.html * https://www.suse.com/security/cve/CVE-2026-59996.html * https://www.suse.com/security/cve/CVE-2026-59997.html * https://www.suse.com/security/cve/CVE-2026-59998.html * https://www.suse.com/security/cve/CVE-2026-59999.html * https://www.suse.com/security/cve/CVE-2026-60000.html * https://www.suse.com/security/cve/CVE-2026-60001.html * https://www.suse.com/security/cve/CVE-2026-60002.html * https://www.suse.com/security/cve/CVE-2026-73281.html * https://www.suse.com/security/cve/CVE-2026-73282.html * https://www.suse.com/security/cve/CVE-2026-73283.html * https://bugzilla.suse.com/show_bug.cgi?id=1259462 * https://bugzilla.suse.com/show_bug.cgi?id=1271044 * https://bugzilla.suse.com/show_bug.cgi?id=1271046 * https://bugzilla.suse.com/show_bug.cgi?id=1271048 * https://bugzilla.suse.com/show_bug.cgi?id=1271049 * https://bugzilla.suse.com/show_bug.cgi?id=1271052 * https://bugzilla.suse.com/show_bug.cgi?id=1271053 * https://bugzilla.suse.com/show_bug.cgi?id=1271054 * https://bugzilla.suse.com/show_bug.cgi?id=1271055 * https://bugzilla.suse.com/show_bug.cgi?id=1275074 * https://bugzilla.suse.com/show_bug.cgi?id=1275075 * https://bugzilla.suse.com/show_bug.cgi?id=1275079 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:31:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:31:07 -0000 Subject: SUSE-SU-2026:24381-1: important: Security update for containerd Message-ID: <179308986780.8521.4610046096505230770@f5dd93353bb2> # Security update for containerd Announcement ID: SUSE-SU-2026:24381-1 Release Date: 2026-10-23T08:05:54Z Rating: important References: * bsc#1268430 * bsc#1268441 * bsc#1274214 * bsc#1280007 * bsc#1282669 * bsc#1285124 Cross-References: * CVE-2026-39882 * CVE-2026-47262 * CVE-2026-53488 * CVE-2026-53493 * CVE-2026-53495 * CVE-2026-95838 CVSS scores: * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47262 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-47262 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-47262 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-53488 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53488 ( NVD ): 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53488 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-53493 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53493 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53493 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53495 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53495 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.1 An update that solves six vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). * CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). * CVE-2026-53488: CRI plugin propagates labels from an image config to a container without validation (bsc#1268430). * CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). * CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-765 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * containerd-1.7.29-slfo.1.1_5.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-47262.html * https://www.suse.com/security/cve/CVE-2026-53488.html * https://www.suse.com/security/cve/CVE-2026-53493.html * https://www.suse.com/security/cve/CVE-2026-53495.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1268430 * https://bugzilla.suse.com/show_bug.cgi?id=1268441 * https://bugzilla.suse.com/show_bug.cgi?id=1274214 * https://bugzilla.suse.com/show_bug.cgi?id=1280007 * https://bugzilla.suse.com/show_bug.cgi?id=1282669 * https://bugzilla.suse.com/show_bug.cgi?id=1285124 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:31:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:31:19 -0000 Subject: SUSE-SU-2026:24380-1: important: Security update for cyrus-sasl Message-ID: <179308987981.8521.17477030156216365093@f5dd93353bb2> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24380-1 Release Date: 2026-10-22T07:33:06Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1233529 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability, contains one feature and has four fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-763 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * cyrus-sasl-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-2.1.28-slfo.1.1_2.1 * cyrus-sasl-digestmd5-2.1.28-slfo.1.1_2.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-gssapi-2.1.28-slfo.1.1_2.1 * libsasl2-3-debuginfo-2.1.28-slfo.1.1_2.1 * cyrus-sasl-debugsource-2.1.28-slfo.1.1_2.1 * libsasl2-3-2.1.28-slfo.1.1_2.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-slfo.1.1_2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1233529 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:33 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:33:33 -0000 Subject: SUSE-SU-2026:24379-1: important: Security update for the Linux Kernel Message-ID: <179309001328.8521.2423612290497686534@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24379-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-719 ## Package List: * SUSE Linux Micro 6.1 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (aarch64 x86_64) * kernel-default-base-6.4.0-159998.54.1.159998.21.40 * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-159998.54.1 * kernel-default-devel-6.4.0-159998.54.1 * kernel-default-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (noarch) * kernel-devel-6.4.0-159998.54.1 * kernel-macros-6.4.0-159998.54.1 * kernel-source-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (ppc64le) * kernel-default-base-6.4.0-159998.54.1.159998.21.39 * SUSE Linux Micro 6.1 (ppc64le x86_64) * kernel-default-devel-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.54.1 * SUSE Linux Micro 6.1 (x86_64) * kernel-kvmsmall-debuginfo-6.4.0-159998.54.1 * kernel-kvmsmall-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:33:41 -0000 Subject: SUSE-SU-2026:24378-1: important: Security update for podman Message-ID: <179309002123.8521.13260671561471963197@f5dd93353bb2> # Security update for podman Announcement ID: SUSE-SU-2026:24378-1 Release Date: 2026-10-20T15:13:34Z Rating: important References: * bsc#1268579 * bsc#1269471 Cross-References: * CVE-2025-22869 * CVE-2025-47913 * CVE-2025-47914 * CVE-2025-52881 * CVE-2025-6032 * CVE-2025-9566 * CVE-2026-34986 * CVE-2026-39829 * CVE-2026-39830 * CVE-2026-42508 * CVE-2026-55686 * CVE-2026-57231 CVSS scores: * CVE-2025-22869 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-22869 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-22869 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47913 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-47913 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47913 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2025-47914 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-47914 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-47914 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-52881 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2025-52881 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2025-52881 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-52881 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H * CVE-2025-6032 ( SUSE ): 9.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2025-6032 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2025-6032 ( NVD ): 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H * CVE-2025-9566 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-9566 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2025-9566 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-34986 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-34986 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-34986 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39829 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39829 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39830 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-39830 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39830 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-39830 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42508 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-42508 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42508 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-42508 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-55686 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-55686 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-57231 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-57231 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57231 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 12 vulnerabilities can now be installed. ## Description: This update for podman fixes the following issues: * CVE-2026-55686: Podman: WORKDIR symlink traversal vulnerability (bsc#1268579). * CVE-2026-57231: specially crafted image can trick podman run into leaking host environment variables into the container (bsc#1269471). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-760 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * podmansh-5.4.2-slfo.1.1_6.1 * podman-5.4.2-slfo.1.1_6.1 * podman-remote-debuginfo-5.4.2-slfo.1.1_6.1 * podman-remote-5.4.2-slfo.1.1_6.1 * podman-debuginfo-5.4.2-slfo.1.1_6.1 * SUSE Linux Micro 6.1 (noarch) * podman-docker-5.4.2-slfo.1.1_6.1 ## References: * https://www.suse.com/security/cve/CVE-2025-22869.html * https://www.suse.com/security/cve/CVE-2025-47913.html * https://www.suse.com/security/cve/CVE-2025-47914.html * https://www.suse.com/security/cve/CVE-2025-52881.html * https://www.suse.com/security/cve/CVE-2025-6032.html * https://www.suse.com/security/cve/CVE-2025-9566.html * https://www.suse.com/security/cve/CVE-2026-34986.html * https://www.suse.com/security/cve/CVE-2026-39829.html * https://www.suse.com/security/cve/CVE-2026-39830.html * https://www.suse.com/security/cve/CVE-2026-42508.html * https://www.suse.com/security/cve/CVE-2026-55686.html * https://www.suse.com/security/cve/CVE-2026-57231.html * https://bugzilla.suse.com/show_bug.cgi?id=1268579 * https://bugzilla.suse.com/show_bug.cgi?id=1269471 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:33:58 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:33:58 -0000 Subject: SUSE-SU-2026:24377-1: important: Security update for python-PyJWT Message-ID: <179309003837.8521.18380088335047198650@f5dd93353bb2> # Security update for python-PyJWT Announcement ID: SUSE-SU-2026:24377-1 Release Date: 2026-10-20T15:09:47Z Rating: important References: * bsc#1283060 * bsc#1283061 * bsc#1283064 * bsc#1283065 * bsc#1283066 * bsc#1283067 * bsc#1283068 * bsc#1283071 * bsc#1283072 * bsc#1283829 Cross-References: * CVE-2026-101917 * CVE-2026-101918 * CVE-2026-102267 * CVE-2026-102268 * CVE-2026-102269 * CVE-2026-102270 * CVE-2026-102271 * CVE-2026-102274 * CVE-2026-102275 * CVE-2026-103001 CVSS scores: * CVE-2026-101917 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101917 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-101918 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-101918 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102267 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102267 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102268 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102269 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102269 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-102270 ( SUSE ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102270 ( NVD ): 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102271 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102271 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-102274 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102274 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102275 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-102275 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103001 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-103001 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N Affected Products: * SUSE Linux Micro 6.1 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for python-PyJWT fixes the following issues: * CVE-2026-101917: attacker traffic can amplify outbound requests to the configured JWKS endpoint (bsc#1283060). * CVE-2026-101918: unauthenticated request can raise an exception that may produce an HTTP 500 response (bsc#1283061). * CVE-2026-102267: forwarded credentials may be disclosed or verification keys may be substituted (bsc#1283064). * CVE-2026-102268: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283065). * CVE-2026-102269: raw-token revocation checks can fail to recognize an equivalent modified token (bsc#1283066). * CVE-2026-102270: an attacker can cause intensive CPU consumption (bsc#1283067). * CVE-2026-102271: an attacker who knows the public key can forge authenticated HMAC tokens (bsc#1283068). * CVE-2026-102274: Malformed RSA JWK aborts parsing of an entire JWK Set (bsc#1283071). * CVE-2026-102275: an attacker may use a stolen sender-constrained token without the legitimate private key (bsc#1283072). * CVE-2026-103001: reused mutable options mapping can cause verification checks bypass on subsequent decode calls (bsc#1283829). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-761 ## Package List: * SUSE Linux Micro 6.1 (noarch) * python311-PyJWT-2.12.1-slfo.1.1_3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-101917.html * https://www.suse.com/security/cve/CVE-2026-101918.html * https://www.suse.com/security/cve/CVE-2026-102267.html * https://www.suse.com/security/cve/CVE-2026-102268.html * https://www.suse.com/security/cve/CVE-2026-102269.html * https://www.suse.com/security/cve/CVE-2026-102270.html * https://www.suse.com/security/cve/CVE-2026-102271.html * https://www.suse.com/security/cve/CVE-2026-102274.html * https://www.suse.com/security/cve/CVE-2026-102275.html * https://www.suse.com/security/cve/CVE-2026-103001.html * https://bugzilla.suse.com/show_bug.cgi?id=1283060 * https://bugzilla.suse.com/show_bug.cgi?id=1283061 * https://bugzilla.suse.com/show_bug.cgi?id=1283064 * https://bugzilla.suse.com/show_bug.cgi?id=1283065 * https://bugzilla.suse.com/show_bug.cgi?id=1283066 * https://bugzilla.suse.com/show_bug.cgi?id=1283067 * https://bugzilla.suse.com/show_bug.cgi?id=1283068 * https://bugzilla.suse.com/show_bug.cgi?id=1283071 * https://bugzilla.suse.com/show_bug.cgi?id=1283072 * https://bugzilla.suse.com/show_bug.cgi?id=1283829 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:34:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:34:15 -0000 Subject: SUSE-SU-2026:24376-1: important: Security update for unbound Message-ID: <179309005590.8521.10745271323610197955@f5dd93353bb2> # Security update for unbound Announcement ID: SUSE-SU-2026:24376-1 Release Date: 2026-10-20T08:22:33Z Rating: important References: * bsc#1280403 * bsc#1280404 * bsc#1280405 * bsc#1280406 * bsc#1280409 * bsc#1280411 * bsc#1280412 * bsc#1280413 * bsc#1280414 Cross-References: * CVE-2026-50248 * CVE-2026-77860 * CVE-2026-77955 * CVE-2026-78227 * CVE-2026-80225 * CVE-2026-81634 * CVE-2026-81642 * CVE-2026-82717 * CVE-2026-82720 * CVE-2026-85501 CVSS scores: * CVE-2026-50248 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-50248 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-50248 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L * CVE-2026-77860 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77860 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77860 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77955 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-77955 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-77955 ( NVD ): 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-78227 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-78227 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-78227 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-80225 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-80225 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-80225 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81634 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81634 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81634 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-81642 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-81642 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-81642 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red * CVE-2026-81642 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-82717 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82717 ( NVD ): 8.4 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82717 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-82720 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-82720 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-82720 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-85501 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-85501 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-85501 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves 10 vulnerabilities can now be installed. ## Description: This update for unbound fixes the following issues: * CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' (bsc#1280403). * CVE-2026-77955: Possible ZONEMD verification bypass window (bsc#1280404). * CVE-2026-78227: Use-after-free in DoQ stream output buffer on reset re- transmission (bsc#1280405). * CVE-2026-80225: Possible degradation of service from continuous queries on the same TCP/DoT connection (bsc#1280406). * CVE-2026-81634: Possible heap buffer overflow during DNSSEC canonicalization (bsc#1280409). * CVE-2026-81642: Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (bsc#1280411). * CVE-2026-82717: CNAME synthesis could lead to heap corruption (bsc#1280412). * CVE-2026-82720: Use-after-free in DoH stream cleanup code path (bsc#1280413). * CVE-2026-85501: Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (bsc#1280414). Changes for unbound: * Update to 1.26.1: * Update icannbundle.pem certificates in unbound-anchor, valid for 2009-2029 and 2025-2045 * Add max-transfer-size and max-transfer-time options to limit auth-zone and rpz transfer size and time, default disabled * Overload local_data_remove in unbound-control to also remove specific records * Add local-zone types block_aaaa, block_a_wdata and block_aaaa_wdata; fix respip+dns64 to use original A records instead of ones already modified by respip * ipsecmod hook script now needs to start with '#!/bin/sh', it is executed with execv instead of system for security * Server now continues to start if a secondary zone fails to load from its zonefile, or if a primary zonefile is missing; $INCLUDE is no longer allowed in secondary zone zonefiles * Auth-zone and RPZ zones now drop out-of-zone content on load * Primary hostname for zone transfers can now use CNAME(s) * Fix windows 64bit build for libssp dependency * Update IANA portlist * Fix heap out-of-bounds write via size_t-to-int truncation in setup_if()/outside_network_create() for large num_ports values * Fix to clean up log ids after a failure to start a worker thread * Relax assertions after the TTL 0 handling change in cachedb and packet_rrset_copy_region * Fix val_find_DS to check the result of packet_rrset_copy_region before using it * Fix that dns64 answers check the AAAA query is DNSSEC validated, improving RFC6147 conformance * Fix allocation-failure hardening of rrset cache wildcard storage and canonical NSEC owner replacement * Fix DNSSEC validation and DNSKEY size calculation for noncanonical RSA DNSKEYs with leading zeroes * Fix mixed class referrals to use the query class * Fix serve-expired responses from cachedb to not store bogus data * Fix lame server detection for selfpointed glue records * Fix cleanup of DoH sessions when the same query is on multiple streams * Fix for signed same-owner CNAME and ordinary RRset responses * Fix mesh new client/callback to roll back added address, tcp mesh state and callback on initialization failure * Fix autotrust state-file line overflow that could give a hold-down bypass * Fix to limit the DSNS per-label walk in the iterator * Fix that the ratelimit is decremented on successful referrals * Fix msgencode insert_query assertion for a local_alias * Fix to reset the tcp-timeout before applying a load based reduction * Fix to correctly decrement per-netblock tcp connection limits * Fix, in depth, for respip rewrite of dns64 responses * Fix that dns64 with subnetcache does not write ECS scoped answers to the global cache * Fix ipset module name-too-long checks and race conditions on the local name buffer and socket close * Fix validator to cap the number of ANY RRsets it validates and shorten the wait timer * Fix race condition causing segfault when starting threads * Fix header_seen detection for trust anchor files to detect the id line * Fix heap use-after-free in class response processing when at least two distinct classes are configured * Fix negative cache to work with NSEC3 records without salt * Fix parse of svcbparam ech, it had an incorrect length * Fix that quotation and escaping works the same in auth-zone url content as in zonefile reads * Fix ipset module to use larger domain name buffers and check buffer lengths * Fix PROXYv2 header read and consume to check the header size * Fix negative cache NSEC3 nodata proof to use the correct message size * Fix fast_reload for when a ZONEMD lookup is in progress * Fix that validation canonicalization of domain names in rdata checks buffer bounds * Fix dump_cache to use a larger record buffer and check that an owner name does not collide with BADRR * Fix that dns64 cleans up the allocated message if the adjust routines fail, and checks for malformed A/AAAA in auth-zones * Fix pythonmod script read for numeric overflow * Fix configure to detect the correct QUIC early-data function and to check for the ngtcp2_crypto_ossl header * Fix compile with OpenSSL 4.0.1, and with OpenSSL 1.0.2 and earlier in server cleanup * Fix that auth-zone/rpz allow-notify addresses and netblocks are available from start, and fix the probe step skip * Fix to perform a full transfer periodically to stop increasing memory usage for rpz zones * Fix assertion failure for a long HTTP header that fills the buffer, and buffer overflow with lower than default size and http transfer * Fix that misconfigured iter-scrub-ns: 0 causes request failures * Fix fast_reload handling of in-progress ZONEMD lookups and of removing an auth zone while its lookups are in progress * Fix integer overflow in infra-cache-max-rtt calculation and for very high values of sock-queue-timeout * Fix erroneous DNS error report values after a bogus AAAA query * Fix fast_reload to not terminate the server on config errors for key files * Fix log of an aliased qname to not use freed region memory * Fix DNAME synthesis from cache to keep using 0TTL entries within a sliding window without surpassing RRSIG expiry * Fix that dns64 bypasses the rpz-passthru rule during synthesis * Fix to disallow $INCLUDE for secondary zones; failed loads now clear the zone data so there is no partial zone * Fix zone read to allow SVCB records in unknown format that cannot be written out * Fix that a half-written trust anchor file does not crash the server at runtime * Fix that auth-zone and RPZ zones drop out-of-zone records * Fix that dns64 honors the forward-no-cache and stub-no-cache options * Fix that a signed wildcard NSEC is checked before use, so it does not allow insecure DS proofs inappropriately * Fix several crashes after malloc failure: half-built local_alias, RPZ list, delegation point cleanup, dns64_inform_super, new_local_rrset for RPZ qname trigger, doq connection setup, ngtcp2_conn_server_new, TCP accept handling, rpz_strip_nsdname, edns subnet addrtree insert, and rpz response create * Fix that a zonefile-only zone continues server startup with a warning if the file is missing on start * Fix that dnscrypt configuration does not crash on a secret/public key mismatch, and duplicate files are skipped * Fix locking in libunbound ub_ctx_set_event * Fix that libunbound pipe functions fail with an error after an event base is set * Fix incorrect cleanup after an allocation failure for a delegation point * Fix that the server does not crash if shared memory cannot be created for shm-enable * Fix auth primary host name lookup to allow CNAMEs * Fix memory leak on DNAME 0TTL records * Fix that fast_reload disown of the auth zone transfer task cleans up the chunk list * Fix unbound-checkconf to check for auth-zone download filename collisions * Fix malloc failure in auth-zone insert rr to avoid an empty node and infinite loop * Fix that unbound-control auth_zone_reload stops answering from the zone after a read failure * Fix stats pipe draining after a malloc failure so internal messaging stays correct, and the server no longer exits on stats pipe communication failure * Fix that fast_reload does not terminate the server if random init for DNS cookies fails * Fix thread setname for dnstap and fast_reload thread start * Add libunbound/remote.h, a shared header with prototypes for remote control connections * Fix DEREF_AFTER_NULL on worker_init when stat_timer allocation fails with an out of memory error * Fix DoH POST requests missing content-length causing :status 400 from strict resolvers like Cloudflare and Mullvad * Fix randomness generation on macOS/iOS under chroot * Fix ipsecmod deref on null in ipsecmod-whitelist after OOM, and possible deref on null after reply_find_answer_rrset() * Fix that DoQ responses were never padded; pad-responses now applies to comm_doq per RFC 9250 section 5.4 * Fix log printout error in the fix for CVE-2026-50248 when the primary name is bogus * Fix NSEC3 proofs to check the b32 name matches the signer name; RRSIGs are no longer valid when this does not match * Fix aggressive negative cache to not insert NSEC records with an overreaching next owner name outside the trust anchor's bailiwick * Fix mesh cycle detection for respip CNAME loop with tagged clients * Fix unbound-anchor to check the return value of X509_NAME_get_text_by_NID for the emailaddress * Fix locking of the shared_ports structure during initialisation, and of the anchor structure when a file is set during header parsing * Fix memory leak in xfer_set_masters() error path in authzone * Fix to use tls-port after a referral when tls-upstream is set * Fix pthread detection on Solaris 11.4 * Fix to call OPENSSL_cleanup on exit when it is defined * pythonmod: check the return value after ftell() ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-759 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * unbound-debugsource-1.26.1-slfo.1.1_1.1 * unbound-anchor-1.26.1-slfo.1.1_1.1 * libunbound8-1.26.1-slfo.1.1_1.1 * unbound-anchor-debuginfo-1.26.1-slfo.1.1_1.1 * libunbound8-debuginfo-1.26.1-slfo.1.1_1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-50248.html * https://www.suse.com/security/cve/CVE-2026-77860.html * https://www.suse.com/security/cve/CVE-2026-77955.html * https://www.suse.com/security/cve/CVE-2026-78227.html * https://www.suse.com/security/cve/CVE-2026-80225.html * https://www.suse.com/security/cve/CVE-2026-81634.html * https://www.suse.com/security/cve/CVE-2026-81642.html * https://www.suse.com/security/cve/CVE-2026-82717.html * https://www.suse.com/security/cve/CVE-2026-82720.html * https://www.suse.com/security/cve/CVE-2026-85501.html * https://bugzilla.suse.com/show_bug.cgi?id=1280403 * https://bugzilla.suse.com/show_bug.cgi?id=1280404 * https://bugzilla.suse.com/show_bug.cgi?id=1280405 * https://bugzilla.suse.com/show_bug.cgi?id=1280406 * https://bugzilla.suse.com/show_bug.cgi?id=1280409 * https://bugzilla.suse.com/show_bug.cgi?id=1280411 * https://bugzilla.suse.com/show_bug.cgi?id=1280412 * https://bugzilla.suse.com/show_bug.cgi?id=1280413 * https://bugzilla.suse.com/show_bug.cgi?id=1280414 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:36:34 -0000 Subject: SUSE-SU-2026:24375-1: important: Security update for the Linux Kernel Message-ID: <179309019426.8521.12569282545935826206@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24375-1 Release Date: 2026-10-21T12:21:28Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 * SUSE Linux Micro Extras 6.1 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.1 zypper in -t patch SUSE-SLE-Micro-Extras-6.1-kernel-719 ## Package List: * SUSE Linux Micro Extras 6.1 (nosrc) * kernel-64kb-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.1 (aarch64) * kernel-64kb-debugsource-6.4.0-159998.54.1 * kernel-64kb-devel-6.4.0-159998.54.1 * SUSE Linux Micro Extras 6.1 (aarch64 ppc64le s390x x86_64) * kernel-syms-6.4.0-159998.54.1 * kernel-obs-build-6.4.0-159998.54.1 * kernel-obs-build-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:36:42 -0000 Subject: SUSE-SU-2026:24374-1: important: Security update for google-osconfig-agent Message-ID: <179309020277.8521.14471368590040379825@f5dd93353bb2> # Security update for google-osconfig-agent Announcement ID: SUSE-SU-2026:24374-1 Release Date: 2026-10-26T07:00:03Z Rating: important References: * bsc#1284870 * bsc#1285135 * bsc#1285283 Cross-References: * CVE-2026-61801 * CVE-2026-78669 * CVE-2026-95838 CVSS scores: * CVE-2026-61801 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-61801 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-61801 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78669 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Micro 6.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for google-osconfig-agent fixes the following issues: * CVE-2026-61801: github.com/moby/sys/user: unbounded parsing of user and group database files can lead to denial of service (bsc#1284870). * CVE-2026-78669: golang.org/x/net/http2: excessive CPU consumption from repeated initial window changes (bsc#1285283). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285135). Changes for google-osconfig-agent: * Update to version 20261015.00 * Add scalibr os benchmarks (#1044) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-948 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * google-osconfig-agent-20261015.00-159998.1.1 * google-osconfig-agent-debuginfo-20261015.00-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-61801.html * https://www.suse.com/security/cve/CVE-2026-78669.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1284870 * https://bugzilla.suse.com/show_bug.cgi?id=1285135 * https://bugzilla.suse.com/show_bug.cgi?id=1285283 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:36:49 -0000 Subject: SUSE-SU-2026:24373-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179309020985.8521.5512539422623906334@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24373-1 Release Date: 2026-10-23T13:55:47Z Rating: moderate References: * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-946 ## Package List: * SUSE Linux Micro 6.0 (noarch) * ca-certificates-mozilla-2.92-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:36:56 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:36:56 -0000 Subject: SUSE-SU-2026:24372-1: important: Security update for cifs-utils Message-ID: <179309021608.8521.2082319233334095226@f5dd93353bb2> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:24372-1 Release Date: 2026-10-23T08:00:13Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-947 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * cifs-utils-7.0-159998.1.1 * cifs-utils-debuginfo-7.0-159998.1.1 * cifs-utils-debugsource-7.0-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:39:09 -0000 Subject: SUSE-SU-2026:24371-1: important: Security update for the Linux Kernel Message-ID: <179309034994.8521.10690654024356302925@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24371-1 Release Date: 2026-10-21T11:44:16Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264851 * bsc#1266694 * bsc#1266730 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274008 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43299 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64461 * CVE-2026-64568 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-92488 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64568 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64568 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64568 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves 98 vulnerabilities and has one fix can now be installed. ## Description: The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * kernel-binary.spec.in: Fix syntax error. * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-719 ## Package List: * SUSE Linux Micro 6.0 (aarch64 nosrc s390x x86_64) * kernel-default-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (aarch64 x86_64) * kernel-default-base-6.4.0-159998.54.1.159998.21.40 * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * kernel-default-debugsource-6.4.0-159998.54.1 * kernel-default-debuginfo-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-default-livepatch-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (noarch) * kernel-devel-6.4.0-159998.54.1 * kernel-macros-6.4.0-159998.54.1 * kernel-source-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (nosrc x86_64) * kernel-kvmsmall-6.4.0-159998.54.1 * SUSE Linux Micro 6.0 (x86_64) * kernel-kvmsmall-debuginfo-6.4.0-159998.54.1 * kernel-kvmsmall-debugsource-6.4.0-159998.54.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-64568.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274008 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:39:45 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:39:45 -0000 Subject: SUSE-SU-2026:24368-1: important: Security update for libsoup Message-ID: <179309038511.8521.2609917880573748181@f5dd93353bb2> # Security update for libsoup Announcement ID: SUSE-SU-2026:24368-1 Release Date: 2026-10-21T09:15:58Z Rating: important References: * bsc#1271446 * bsc#1271447 * bsc#1271448 * bsc#1271449 * bsc#1272195 * bsc#1272196 * bsc#1273156 * bsc#1283299 * bsc#1283300 * bsc#1283301 * bsc#1283302 * bsc#1283303 * bsc#1283304 * bsc#1283831 Cross-References: * CVE-2026-102555 * CVE-2026-102556 * CVE-2026-102557 * CVE-2026-102558 * CVE-2026-102559 * CVE-2026-102560 * CVE-2026-103399 * CVE-2026-12547 * CVE-2026-12548 * CVE-2026-15711 * CVE-2026-15712 * CVE-2026-15713 * CVE-2026-15714 * CVE-2026-2708 * CVE-2026-66339 CVSS scores: * CVE-2026-102555 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102555 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102555 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-102556 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102556 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102556 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102557 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102557 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102558 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102558 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102559 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102559 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102560 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102560 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-103399 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-103399 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-103399 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-12547 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-12547 ( SUSE ): 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12547 ( NVD ): 3.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N * CVE-2026-12548 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-12548 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-12548 ( NVD ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-15711 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15711 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15712 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-15713 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15713 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15714 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-15714 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-2708 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-2708 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-2708 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-2708 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-66339 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-66339 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N * CVE-2026-66339 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves 15 vulnerabilities can now be installed. ## Description: This update for libsoup fixes the following issues: * CVE-2026-12547: Header "Proxy-Authorization" leads to credentials being send to different proxy after proxy switch (bsc#1272195). * CVE-2026-12548: out-of-bounds read in multipart body parser due to an integer truncation (bsc#1272196). * CVE-2026-15711: SoupWebsocketConnection: WebSocket remote denial of service via oversized control frame protocol violation (bsc#1271446). * CVE-2026-15712: SoupClientMessageIOHTTP2: HTTP/2 GOAWAY frame parsing heap buffer over-read via invalid NUL- termination assumption (bsc#1271447). * CVE-2026-15713: SoupCache: libsoup: HTTP/2 frame window exhaustion remote denial of service via memory leak (bsc#1271448). * CVE-2026-15714: SoupMultipartInputStream: libsoup: Out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string (bsc#1271449). * CVE-2026-66339: proxy credentials leak to destination server via `Proxy- Authorization` header in CONNECT tunnels (bsc#1273156). * CVE-2026-102555: Heap buffer overflow via uninitialized length in data-URI base64 decoding (bsc#1283299). * CVE-2026-102556: Heap buffer overflow from WebSocket Pong signal type confusion (bsc#1283300). * CVE-2026-102557: Heap buffer overflow during WebSocket message reassembly (bsc#1283301). * CVE-2026-102558: Heap buffer overflow during WebSocket receive-buffer growth (bsc#1283302). * CVE-2026-102559: Heap buffer overflow during WebSocket client-frame masking (bsc#1283303). * CVE-2026-102560: Heap buffer overflow during outgoing permessage-deflate buffer growth (bsc#1283304). * CVE-2026-103399: incomplete request body draining in HTTP/1.x early responses can allow HTTP request smuggling (bsc#1283831). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-943 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libsoup-debugsource-3.4.2-159998.1.1 * libsoup-3_0-0-3.4.2-159998.1.1 * libsoup-3_0-0-debuginfo-3.4.2-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102555.html * https://www.suse.com/security/cve/CVE-2026-102556.html * https://www.suse.com/security/cve/CVE-2026-102557.html * https://www.suse.com/security/cve/CVE-2026-102558.html * https://www.suse.com/security/cve/CVE-2026-102559.html * https://www.suse.com/security/cve/CVE-2026-102560.html * https://www.suse.com/security/cve/CVE-2026-103399.html * https://www.suse.com/security/cve/CVE-2026-12547.html * https://www.suse.com/security/cve/CVE-2026-12548.html * https://www.suse.com/security/cve/CVE-2026-15711.html * https://www.suse.com/security/cve/CVE-2026-15712.html * https://www.suse.com/security/cve/CVE-2026-15713.html * https://www.suse.com/security/cve/CVE-2026-15714.html * https://www.suse.com/security/cve/CVE-2026-2708.html * https://www.suse.com/security/cve/CVE-2026-66339.html * https://bugzilla.suse.com/show_bug.cgi?id=1271446 * https://bugzilla.suse.com/show_bug.cgi?id=1271447 * https://bugzilla.suse.com/show_bug.cgi?id=1271448 * https://bugzilla.suse.com/show_bug.cgi?id=1271449 * https://bugzilla.suse.com/show_bug.cgi?id=1272195 * https://bugzilla.suse.com/show_bug.cgi?id=1272196 * https://bugzilla.suse.com/show_bug.cgi?id=1273156 * https://bugzilla.suse.com/show_bug.cgi?id=1283299 * https://bugzilla.suse.com/show_bug.cgi?id=1283300 * https://bugzilla.suse.com/show_bug.cgi?id=1283301 * https://bugzilla.suse.com/show_bug.cgi?id=1283302 * https://bugzilla.suse.com/show_bug.cgi?id=1283303 * https://bugzilla.suse.com/show_bug.cgi?id=1283304 * https://bugzilla.suse.com/show_bug.cgi?id=1283831 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:03 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:40:03 -0000 Subject: SUSE-SU-2026:24367-1: important: Security update for gcc13 Message-ID: <179309040395.8521.5182865217167340306@f5dd93353bb2> # Security update for gcc13 Announcement ID: SUSE-SU-2026:24367-1 Release Date: 2026-10-20T11:25:12Z Rating: important References: * bsc#1216664 * bsc#1219031 * bsc#1238491 * bsc#1239566 * bsc#1240788 * bsc#1241549 * bsc#1243991 * bsc#1244050 * bsc#1267998 * bsc#1283123 * jsc#PED-12029 * jsc#PED-253 * jsc#PED-7395 Cross-References: * CVE-2026-102010 CVSS scores: * CVE-2026-102010 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H * CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability, contains three features and has nine fixes can now be installed. ## Description: This update for gcc13 fixes the following issues: Security issue fixed: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). Non security issue fixed: * Multiple cross-arm-none-gcc13 bugs (bsc#1219031). Changes for gcc13: * Update to final GCC 13.5 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-941 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libatomic1-13.5.0+git10516-159998.1.1 * libgcc_s1-debuginfo-13.5.0+git10516-159998.1.1 * libgomp1-debuginfo-13.5.0+git10516-159998.1.1 * libstdc++6-13.5.0+git10516-159998.1.1 * libstdc++6-debuginfo-13.5.0+git10516-159998.1.1 * libgomp1-13.5.0+git10516-159998.1.1 * libatomic1-debuginfo-13.5.0+git10516-159998.1.1 * gcc13-debugsource-13.5.0+git10516-159998.1.1 * libgcc_s1-13.5.0+git10516-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102010.html * https://bugzilla.suse.com/show_bug.cgi?id=1216664 * https://bugzilla.suse.com/show_bug.cgi?id=1219031 * https://bugzilla.suse.com/show_bug.cgi?id=1238491 * https://bugzilla.suse.com/show_bug.cgi?id=1239566 * https://bugzilla.suse.com/show_bug.cgi?id=1240788 * https://bugzilla.suse.com/show_bug.cgi?id=1241549 * https://bugzilla.suse.com/show_bug.cgi?id=1243991 * https://bugzilla.suse.com/show_bug.cgi?id=1244050 * https://bugzilla.suse.com/show_bug.cgi?id=1267998 * https://bugzilla.suse.com/show_bug.cgi?id=1283123 * https://jira.suse.com/browse/PED-12029 * https://jira.suse.com/browse/PED-253 * https://jira.suse.com/browse/PED-7395 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:40:22 -0000 Subject: SUSE-SU-2026:24366-1: important: Security update for libXi Message-ID: <179309042287.8521.12596399057084492821@f5dd93353bb2> # Security update for libXi Announcement ID: SUSE-SU-2026:24366-1 Release Date: 2026-10-20T09:40:34Z Rating: important References: * bsc#1281605 * bsc#1281606 * bsc#1281608 * bsc#1281609 * bsc#1281612 * bsc#1281615 * bsc#1281651 * bsc#1285084 * bsc#1285085 Cross-References: * CVE-2026-109089 * CVE-2026-109090 * CVE-2026-93541 * CVE-2026-93542 * CVE-2026-93543 * CVE-2026-93544 * CVE-2026-93545 * CVE-2026-94281 * CVE-2026-94282 CVSS scores: * CVE-2026-109089 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109089 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-109090 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-109090 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-93541 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93541 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93541 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93542 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93542 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93543 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93543 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H * CVE-2026-93544 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93544 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93544 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93545 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93545 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-93545 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94281 ( SUSE ): 5.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94281 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-94281 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94282 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-94282 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves nine vulnerabilities can now be installed. ## Description: This update for libXi fixes the following issues: * CVE-2026-93541: Out-of-bounds read in libXi's XQueryDeviceState() (bsc#1281605). * CVE-2026-93542: Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (bsc#1281606). * CVE-2026-93543: Out-of-bounds read in libXi's XI2 class parser (bsc#1281608). * CVE-2026-93544: Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (bsc#1281609). * CVE-2026-93545: Out-of-bounds read in libXi's XListInputDevices() (bsc#1281612). * CVE-2026-94281: Out-of-bounds read in libXi's XListInputDevices() class parsing (bsc#1281615). * CVE-2026-94282: Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion (bsc#1281651). * CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (bsc#1285084). * CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow (bsc#1285085). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-942 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libXi-debugsource-1.8.1-159998.1.1 * libXi6-1.8.1-159998.1.1 * libXi6-debuginfo-1.8.1-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-109089.html * https://www.suse.com/security/cve/CVE-2026-109090.html * https://www.suse.com/security/cve/CVE-2026-93541.html * https://www.suse.com/security/cve/CVE-2026-93542.html * https://www.suse.com/security/cve/CVE-2026-93543.html * https://www.suse.com/security/cve/CVE-2026-93544.html * https://www.suse.com/security/cve/CVE-2026-93545.html * https://www.suse.com/security/cve/CVE-2026-94281.html * https://www.suse.com/security/cve/CVE-2026-94282.html * https://bugzilla.suse.com/show_bug.cgi?id=1281605 * https://bugzilla.suse.com/show_bug.cgi?id=1281606 * https://bugzilla.suse.com/show_bug.cgi?id=1281608 * https://bugzilla.suse.com/show_bug.cgi?id=1281609 * https://bugzilla.suse.com/show_bug.cgi?id=1281612 * https://bugzilla.suse.com/show_bug.cgi?id=1281615 * https://bugzilla.suse.com/show_bug.cgi?id=1281651 * https://bugzilla.suse.com/show_bug.cgi?id=1285084 * https://bugzilla.suse.com/show_bug.cgi?id=1285085 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 08:40:37 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 08:40:37 -0000 Subject: SUSE-SU-2026:24365-1: important: Security update for libX11 Message-ID: <179309043745.8521.11168265765146230851@f5dd93353bb2> # Security update for libX11 Announcement ID: SUSE-SU-2026:24365-1 Release Date: 2026-10-20T05:42:35Z Rating: important References: * bsc#1280910 * bsc#1281653 * bsc#1281657 * bsc#1281661 Cross-References: * CVE-2026-88806 * CVE-2026-94283 * CVE-2026-94284 * CVE-2026-94285 CVSS scores: * CVE-2026-88806 ( SUSE ): 8.9 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-88806 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-88806 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-94283 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94283 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94283 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-94284 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94284 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-94285 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-94285 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L * CVE-2026-94285 ( NVD ): 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L Affected Products: * SUSE Linux Micro 6.0 An update that solves four vulnerabilities can now be installed. ## Description: This update for libX11 fixes the following issues: * CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow (bsc#1280910). * CVE-2026-94283: Out-of-bounds read vulnerability in libX11's XIM (X Input Method) attribute parser (bsc#1281653). * CVE-2026-94284: Out-of-bounds read vulnerability in libX11's XIM trigger- keyregistration parser.registration parser (bsc#1281657). * CVE-2026-94285: Out-of-bounds read in libX11's byte-oriented codeset parser (bsc#1281661). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-940 ## Package List: * SUSE Linux Micro 6.0 (aarch64 s390x x86_64) * libX11-debugsource-1.8.7-159998.1.1 * libX11-xcb1-1.8.7-159998.1.1 * libX11-6-1.8.7-159998.1.1 * libX11-6-debuginfo-1.8.7-159998.1.1 * libX11-xcb1-debuginfo-1.8.7-159998.1.1 * SUSE Linux Micro 6.0 (noarch) * libX11-data-1.8.7-159998.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-88806.html * https://www.suse.com/security/cve/CVE-2026-94283.html * https://www.suse.com/security/cve/CVE-2026-94284.html * https://www.suse.com/security/cve/CVE-2026-94285.html * https://bugzilla.suse.com/show_bug.cgi?id=1280910 * https://bugzilla.suse.com/show_bug.cgi?id=1281653 * https://bugzilla.suse.com/show_bug.cgi?id=1281657 * https://bugzilla.suse.com/show_bug.cgi?id=1281661 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 12:30:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 12:30:06 -0000 Subject: SUSE-SU-2026:4918-1: important: Security update for suseconnect-ng Message-ID: <179310420640.9067.7650402463710437528@f5dd93353bb2> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:4918-1 Release Date: 2026-10-27T03:34:51Z Rating: important References: Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that can now be installed. ## Description: This update for suseconnect-ng rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4918 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4918 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4918 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4918 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4918 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4918 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * mcp-server-suseconnect-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * suseconnect-ng-1.23.0-150500.3.50.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150500.3.50.1 * libsuseconnect-1.23.0-150500.3.50.1 * suseconnect-ng-1.23.0-150500.3.50.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 16:30:10 -0000 Subject: SUSE-SU-2026:4922-1: important: Security update for podman Message-ID: <179311861034.9806.10051354109970633303@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4922-1 Release Date: 2026-10-27T12:08:50Z Rating: important References: Affected Products: * openSUSE Leap 15.3 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Server 15 SP3 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2026-4922 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2026-4922 ## Package List: * openSUSE Leap 15.3 (aarch64 i586 ppc64le s390x x86_64) * podman-remote-debuginfo-4.9.5-150300.9.89.1 * podmansh-4.9.5-150300.9.89.1 * podman-debuginfo-4.9.5-150300.9.89.1 * podman-4.9.5-150300.9.89.1 * podman-remote-4.9.5-150300.9.89.1 * openSUSE Leap 15.3 (noarch) * podman-docker-4.9.5-150300.9.89.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * podman-debuginfo-4.9.5-150300.9.89.1 * podman-4.9.5-150300.9.89.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:15 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 16:30:15 -0000 Subject: SUSE-SU-2026:4921-1: important: Security update for podman Message-ID: <179311861521.9806.9051591653714502889@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4921-1 Release Date: 2026-10-27T12:08:31Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4921 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4921 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4921 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4921 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4921 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4921 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4921 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4921 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4921 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * openSUSE Leap 15.4 (aarch64 i586 ppc64le s390x x86_64) * podmansh-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * openSUSE Leap 15.4 (noarch) * podman-docker-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * podman-4.9.5-150400.4.85.1 * podman-remote-4.9.5-150400.4.85.1 * podman-debuginfo-4.9.5-150400.4.85.1 * podman-remote-debuginfo-4.9.5-150400.4.85.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * podman-docker-4.9.5-150400.4.85.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 16:30:20 -0000 Subject: SUSE-SU-2026:4920-1: important: Security update for podman Message-ID: <179311862055.9806.12712333174216279885@9bf698548bc1> # Security update for podman Announcement ID: SUSE-SU-2026:4920-1 Release Date: 2026-10-27T12:07:44Z Rating: important References: Affected Products: * Containers Module 15-SP7 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that can now be installed. ## Description: This update for podman rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4920 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4920 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4920 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4920 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4920 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4920 * Containers Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Containers-15-SP7-2026-4920 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4920 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4920 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * openSUSE Leap 15.5 (aarch64 i586 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * openSUSE Leap 15.5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * podman-docker-4.9.5-150500.3.86.1 * Containers Module 15-SP7 (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * Containers Module 15-SP7 (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * podman-docker-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * podman-remote-4.9.5-150500.3.86.1 * podman-debuginfo-4.9.5-150500.3.86.1 * podman-4.9.5-150500.3.86.1 * podman-remote-debuginfo-4.9.5-150500.3.86.1 * podmansh-4.9.5-150500.3.86.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * podman-docker-4.9.5-150500.3.86.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Tue Oct 27 16:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Tue, 27 Oct 2026 16:30:35 -0000 Subject: SUSE-SU-2026:4919-1: moderate: Security update for python Message-ID: <179311863564.9806.10768866942024140022@9bf698548bc1> # Security update for python Announcement ID: SUSE-SU-2026:4919-1 Release Date: 2026-10-27T09:39:14Z Rating: moderate References: * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-19445 CVSS scores: * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for python fixes the following issue: * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4919 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * libpython2_7-1_0-2.7.18-150000.139.2 * python-curses-debuginfo-2.7.18-150000.139.1 * python-xml-debuginfo-2.7.18-150000.139.2 * python-base-debugsource-2.7.18-150000.139.2 * python-debuginfo-2.7.18-150000.139.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.139.2 * python-xml-2.7.18-150000.139.2 * python-base-2.7.18-150000.139.2 * python-debugsource-2.7.18-150000.139.1 * python-curses-2.7.18-150000.139.1 * python-gdbm-debuginfo-2.7.18-150000.139.1 * python-2.7.18-150000.139.1 * python-gdbm-2.7.18-150000.139.1 * python-base-debuginfo-2.7.18-150000.139.2 ## References: * https://www.suse.com/security/cve/CVE-2026-19445.html * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Wed Oct 28 08:30:22 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Wed, 28 Oct 2026 08:30:22 -0000 Subject: SUSE-SU-2026:4923-1: moderate: Security update for containerd Message-ID: <179317622244.10389.15816544546133374525@f5dd93353bb2> # Security update for containerd Announcement ID: SUSE-SU-2026:4923-1 Release Date: 2026-10-27T17:09:42Z Rating: moderate References: * bsc#1268441 * bsc#1274214 * bsc#1280007 * bsc#1282669 * bsc#1285124 Cross-References: * CVE-2026-39882 * CVE-2026-47262 * CVE-2026-53493 * CVE-2026-53495 * CVE-2026-95838 CVSS scores: * CVE-2026-39882 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39882 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-47262 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-47262 ( NVD ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-47262 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-53493 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53493 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-53493 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-53495 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53495 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53495 ( NVD ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-95838 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-95838 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-95838 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves five vulnerabilities can now be installed. ## Description: This update for containerd fixes the following issues: * CVE-2026-39882: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: Memory exhaustion via uncapped HTTP response body reading (bsc#1274214). * CVE-2026-47262: Denial of Service (DoS) condition via a maliciously crafted image (bsc#1268441). * CVE-2026-53493: a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability (bsc#1282669). * CVE-2026-53495: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service (bsc#1280007). * CVE-2026-95838: github.com/containerd/containerd: processing of certain image layers causes superlinear time complexity in unpack handler and can lead to DoS (bsc#1285124). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4923 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * containerd-1.7.29-16.119.1 * containerd-devel-1.7.29-16.119.1 * containerd-ctr-1.7.29-16.119.1 ## References: * https://www.suse.com/security/cve/CVE-2026-39882.html * https://www.suse.com/security/cve/CVE-2026-47262.html * https://www.suse.com/security/cve/CVE-2026-53493.html * https://www.suse.com/security/cve/CVE-2026-53495.html * https://www.suse.com/security/cve/CVE-2026-95838.html * https://bugzilla.suse.com/show_bug.cgi?id=1268441 * https://bugzilla.suse.com/show_bug.cgi?id=1274214 * https://bugzilla.suse.com/show_bug.cgi?id=1280007 * https://bugzilla.suse.com/show_bug.cgi?id=1282669 * https://bugzilla.suse.com/show_bug.cgi?id=1285124 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:30:11 -0000 Subject: SUSE-SU-2026:24435-1: important: Security update for cifs-utils Message-ID: <179326261180.12376.11284284190963653801@f5dd93353bb2> # Security update for cifs-utils Announcement ID: SUSE-SU-2026:24435-1 Release Date: 2026-10-26T13:05:47Z Rating: important References: * bsc#1284932 Cross-References: * CVE-2026-104715 CVSS scores: * CVE-2026-104715 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-104715 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-104715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for cifs-utils fixes the following issue: * CVE-2026-104715: mount options injection via CIFS credentials-file parsing (bsc#1284932). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1988 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * wb-cifs-idmap-plugin-debuginfo-7.4-160000.3.1 * cifs-utils-7.4-160000.3.1 * wb-cifs-idmap-plugin-7.4-160000.3.1 * cifs-utils-debugsource-7.4-160000.3.1 * cifs-utils-debuginfo-7.4-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-104715.html * https://bugzilla.suse.com/show_bug.cgi?id=1284932 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:30:31 -0000 Subject: SUSE-SU-2026:24434-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179326263104.12376.6903997675842968199@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24434-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1986 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:30:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:30:50 -0000 Subject: SUSE-SU-2026:24433-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179326265014.12376.1521571272579484405@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24433-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1985 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:31:04 -0000 Subject: SUSE-SU-2026:24432-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179326266401.12376.12644309146833188239@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24432-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1984 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:31:18 -0000 Subject: SUSE-SU-2026:24431-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179326267813.12376.3469194114313090216@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24431-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1983 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:31:32 -0000 Subject: SUSE-SU-2026:24430-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179326269273.12376.8689936872446428513@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24430-1 Release Date: 2026-10-26T08:46:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1982 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:31:47 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:31:47 -0000 Subject: SUSE-SU-2026:24429-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179326270700.12376.3942010089377369368@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24429-1 Release Date: 2026-10-24T16:11:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1981 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:01 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:32:01 -0000 Subject: SUSE-SU-2026:24428-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179326272103.12376.9098046648450830432@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24428-1 Release Date: 2026-10-24T12:40:45Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1980 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:16 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:32:16 -0000 Subject: SUSE-SU-2026:24427-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179326273607.12376.12754339299475471336@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24427-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1979 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:32:29 -0000 Subject: SUSE-SU-2026:24426-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179326274939.12376.13074065629461355444@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24426-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1978 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:32:43 -0000 Subject: SUSE-SU-2026:24425-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179326276335.12376.2741144996919948992@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24425-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1977 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:32:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:32:57 -0000 Subject: SUSE-SU-2026:24424-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179326277722.12376.11799434039381359187@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24424-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1976 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:33:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:33:12 -0000 Subject: SUSE-SU-2026:24423-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179326279206.12376.14590799824600990841@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24423-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1975 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:36:14 -0000 Subject: SUSE-SU-2026:24422-1: important: Security update for the Linux Kernel Message-ID: <179326297474.12376.15080248189695908639@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24422-1 Release Date: 2026-10-24T10:42:33Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1973 ## Package List: * SUSE Linux Micro 6.2 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (ppc64le x86_64) * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (x86_64) * kernel-rt-livepatch-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-rt-devel-debuginfo-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (noarch) * kernel-source-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-devel-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 nosrc x86_64) * kernel-rt-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 x86_64) * kernel-rt-devel-6.12.0-160000.40.1 * kernel-rt-debuginfo-6.12.0-160000.40.1 * kernel-rt-debugsource-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.40.1 * SUSE Linux Micro 6.2 (aarch64) * kernel-64kb-devel-6.12.0-160000.40.1 * kernel-64kb-debugsource-6.12.0-160000.40.1 * kernel-64kb-debuginfo-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.30 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:34 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:36:34 -0000 Subject: SUSE-SU-2026:24420-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179326299458.12376.7917358725896173919@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24420-1 Release Date: 2026-10-24T09:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1972 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:36:48 -0000 Subject: SUSE-SU-2026:24419-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179326300815.12376.2054191017485948114@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24419-1 Release Date: 2026-10-24T06:13:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1971 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:36:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:36:54 -0000 Subject: SUSE-SU-2026:24418-1: moderate: Security update for haproxy Message-ID: <179326301414.12376.10050684977273003691@f5dd93353bb2> # Security update for haproxy Announcement ID: SUSE-SU-2026:24418-1 Release Date: 2026-10-23T17:10:20Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Micro 6.2 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1969 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * haproxy-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:37:07 -0000 Subject: SUSE-SU-2026:24417-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179326302788.12376.12783170777097454233@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24417-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1968 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:37:20 -0000 Subject: SUSE-SU-2026:24416-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179326304021.12376.9760809414508221818@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24416-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1967 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:37:29 -0000 Subject: SUSE-SU-2026:24415-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179326304900.12376.6003604533621981501@f5dd93353bb2> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24415-1 Release Date: 2026-10-23T15:20:40Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1966 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:37:36 -0000 Subject: SUSE-SU-2026:24414-1: moderate: Security update for ca-certificates-mozilla Message-ID: <179326305609.12376.16674569049542083979@f5dd93353bb2> # Security update for ca-certificates-mozilla Announcement ID: SUSE-SU-2026:24414-1 Release Date: 2026-10-23T13:50:54Z Rating: moderate References: * bsc#1286261 * bsc#1287180 Cross-References: * CVE-2026-114406 CVSS scores: * CVE-2026-114406 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-114406 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-114406 ( NVD ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for ca-certificates-mozilla fixes the following issue: Updated to 2.92 state (bsc#1286261 CVE-2026-114406 bsc#1287180) Removed: * emSign ECC Root CA - C3 * emSign ECC Root CA - G3 * emSign Root CA - C1 ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1958 ## Package List: * SUSE Linux Micro 6.2 (noarch) * ca-certificates-mozilla-2.92-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-114406.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1287180 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:37:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:37:50 -0000 Subject: SUSE-SU-2026:24412-1: important: Security update for mozilla-nss, MozillaFirefox Message-ID: <179326307029.12376.7249672237254426790@f5dd93353bb2> # Security update for mozilla-nss, MozillaFirefox Announcement ID: SUSE-SU-2026:24412-1 Release Date: 2026-10-23T10:37:30Z Rating: important References: * bsc#1286261 * bsc#1286385 Cross-References: * CVE-2026-113470 CVSS scores: * CVE-2026-113470 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-113470 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for mozilla-nss, MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.5.1 ESR (MFSA 2026-112, bsc#1286385): * CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow- lists, and other State component (bsc#1286261). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1963 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libfreebl3-3.125-160000.3.1 * mozilla-nss-debuginfo-3.125-160000.3.1 * mozilla-nss-debugsource-3.125-160000.3.1 * mozilla-nss-certs-debuginfo-3.125-160000.3.1 * libsoftokn3-3.125-160000.3.1 * mozilla-nss-3.125-160000.3.1 * mozilla-nss-tools-3.125-160000.3.1 * mozilla-nss-tools-debuginfo-3.125-160000.3.1 * libfreebl3-debuginfo-3.125-160000.3.1 * mozilla-nss-certs-3.125-160000.3.1 * libsoftokn3-debuginfo-3.125-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-113470.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286385 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:13 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:38:13 -0000 Subject: SUSE-SU-2026:24410-1: important: Security update for docker Message-ID: <179326309341.12376.10891682776324630574@f5dd93353bb2> # Security update for docker Announcement ID: SUSE-SU-2026:24410-1 Release Date: 2026-10-23T09:04:02Z Rating: important References: * bsc#1073877 * bsc#1099277 * bsc#1262346 * bsc#1265782 * bsc#1266176 * bsc#1266625 * bsc#1267827 * bsc#1268280 * bsc#1268359 * bsc#1271209 * bsc#1278193 Cross-References: * CVE-2026-31431 * CVE-2026-33814 * CVE-2026-39821 * CVE-2026-39984 * CVE-2026-41567 CVSS scores: * CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-33814 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-33814 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-39821 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39821 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39821 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N * CVE-2026-39984 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-39984 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-39984 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-41567 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N * CVE-2026-41567 ( NVD ): 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves five vulnerabilities and has six fixes can now be installed. ## Description: This update for docker fixes the following issues: Security issues fixed: * CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1265782). * CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1266625). * CVE-2026-39984: github.com/sigstore/timestamp-authority/v2/pkg/verification: improper certificate validation can be used to bypass some authorization controls (bsc#1262346). * CVE-2026-41567: arbitrary code execution with full daemon privileges when a user uploads a compressed archive into that container (bsc#1267827). Non security issue fixed: * SELinux CIL files are not shipped in Docker (bsc#1278193). Changes for docker: * Update to Docker 29.7.2. See upstream changelog online at fixes(bsc#1268280, bsc#1268359, bsc#1271209, bsc#1266176) * Update to buildx 0.36.1. See upstream changelog online at ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1962 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * docker-debuginfo-29.7.2_ce-160000.8.1 * docker-buildx-0.36.1-160000.8.1 * docker-29.7.2_ce-160000.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31431.html * https://www.suse.com/security/cve/CVE-2026-33814.html * https://www.suse.com/security/cve/CVE-2026-39821.html * https://www.suse.com/security/cve/CVE-2026-39984.html * https://www.suse.com/security/cve/CVE-2026-41567.html * https://bugzilla.suse.com/show_bug.cgi?id=1073877 * https://bugzilla.suse.com/show_bug.cgi?id=1099277 * https://bugzilla.suse.com/show_bug.cgi?id=1262346 * https://bugzilla.suse.com/show_bug.cgi?id=1265782 * https://bugzilla.suse.com/show_bug.cgi?id=1266176 * https://bugzilla.suse.com/show_bug.cgi?id=1266625 * https://bugzilla.suse.com/show_bug.cgi?id=1267827 * https://bugzilla.suse.com/show_bug.cgi?id=1268280 * https://bugzilla.suse.com/show_bug.cgi?id=1268359 * https://bugzilla.suse.com/show_bug.cgi?id=1271209 * https://bugzilla.suse.com/show_bug.cgi?id=1278193 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:38:25 -0000 Subject: SUSE-SU-2026:24408-1: important: Security update for cpupower Message-ID: <179326310581.12376.12028821800270453681@f5dd93353bb2> # Security update for cpupower Announcement ID: SUSE-SU-2026:24408-1 Release Date: 2026-10-22T16:03:55Z Rating: important References: * bsc#1278335 Cross-References: * CVE-2026-80663 CVSS scores: * CVE-2026-80663 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-80663 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-80663 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for cpupower fixes the following issue: * CVE-2026-80663: tools/power/x86/intel-speed-select: Harden daemon pidfile open (bsc#1278335). Changes for cpupower: * intel-speed-select: Harden daemon pidfile open (git-fixes, bsc#1278335, CVE-2026-80663) * turbostat: Fix microcode patch level output for AMD/Hygon (git-fixes) * cpupower: Reset errno before strtoull() (stable-fixes) * intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes) * cpupower: Fix incorrect size in cpuidle_state_disable() (stable-fixes) * cpupower: fix error return value in cpupower_write_sysfs() (stable-fixes) * cpufreq: Fix a bug where the -t option of the set subcommand was not working (stable-fixes) * turbostat: Clustered Uncore MHz counters should honor show/hide options (stable-fixes) * turbostat: Handle non-root legacy-uncore sysfs permissions (stable-fixes) * turbostat: Handle cap_get_proc() ENOSYS (stable-fixes) * turbostat: Fix build with musl (stable-fixes) * cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (stable-fixes) * power turbostat: Fix bogus SysWatt for forked program (git-fixes) * cpupower: bench: Prevent NULL dereference on malloc failure (stable-fixes) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1959 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libcpupower1-6.12.0-160000.3.1 * libcpupower1-debuginfo-6.12.0-160000.3.1 * cpupower-debugsource-6.12.0-160000.3.1 * cpupower-6.12.0-160000.3.1 * cpupower-debuginfo-6.12.0-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-80663.html * https://bugzilla.suse.com/show_bug.cgi?id=1278335 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:38:39 -0000 Subject: SUSE-SU-2026:24406-1: moderate: Security update for coreutils Message-ID: <179326311976.12376.16148807180498275220@f5dd93353bb2> # Security update for coreutils Announcement ID: SUSE-SU-2026:24406-1 Release Date: 2026-10-21T08:10:37Z Rating: moderate References: * bsc#1272698 Cross-References: * CVE-2026-56391 CVSS scores: * CVE-2026-56391 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-56391 ( NVD ): 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-56391 ( NVD ): 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for coreutils fixes the following issue: * CVE-2026-56391: uniq: denial of service and information disclosure via out- of-bounds read with multibyte input (bsc#1272698). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1951 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * coreutils-9.6-160000.3.1 * coreutils-systemd-debuginfo-9.6-160000.3.1 * coreutils-debugsource-9.6-160000.3.1 * coreutils-debuginfo-9.6-160000.3.1 * coreutils-systemd-debugsource-9.6-160000.3.1 * coreutils-systemd-9.6-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-56391.html * https://bugzilla.suse.com/show_bug.cgi?id=1272698 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:38:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:38:49 -0000 Subject: SUSE-SU-2026:24405-1: important: Security update for cyrus-sasl Message-ID: <179326312950.12376.14831219607638016842@f5dd93353bb2> # Security update for cyrus-sasl Announcement ID: SUSE-SU-2026:24405-1 Release Date: 2026-10-21T05:48:33Z Rating: important References: * bsc#1221863 * bsc#1230111 * bsc#1247498 * bsc#1284687 * jsc#PED-14856 Cross-References: * CVE-2026-107161 CVSS scores: * CVE-2026-107161 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-107161 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability, contains one feature and has three fixes can now be installed. ## Description: This update for cyrus-sasl fixes the following issues: Security issue fixed: * CVE-2026-107161: Heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise DIGEST-MD5 clients (bsc#1284687). Non security issues fixed: * Fix cyrus-sasl package failing to build with GCC 14 (bsc#1221863). * Replace insecure MD5 with ephemeral HMAC-SHA256 (bsc#1247498). * Make DIGEST-MD5 work with openssl3 (bsc#1230111). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1950 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * libsasl2-3-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-debugsource-2.1.28-160000.4.1 * cyrus-sasl-gssapi-2.1.28-160000.4.1 * cyrus-sasl-gssapi-debuginfo-2.1.28-160000.4.1 * cyrus-sasl-digestmd5-2.1.28-160000.4.1 * libsasl2-3-2.1.28-160000.4.1 * cyrus-sasl-2.1.28-160000.4.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107161.html * https://bugzilla.suse.com/show_bug.cgi?id=1221863 * https://bugzilla.suse.com/show_bug.cgi?id=1230111 * https://bugzilla.suse.com/show_bug.cgi?id=1247498 * https://bugzilla.suse.com/show_bug.cgi?id=1284687 * https://jira.suse.com/browse/PED-14856 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:39:12 -0000 Subject: SUSE-SU-2026:24403-1: important: Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179326315290.12376.749830233511793306@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24403-1 Release Date: 2026-10-19T14:35:00Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1943 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_29-rt-10-160000.1.1 * kernel-livepatch-SLE16-RT_Update_8-debugsource-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-rt-debuginfo-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:39:28 -0000 Subject: SUSE-SU-2026:24402-1: important: Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179326316861.12376.16993052590612721668@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24402-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1933 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_0-debugsource-18-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-18-160000.3.4 * kernel-livepatch-6_12_0-160000_5-rt-debuginfo-18-160000.3.4 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:39:42 -0000 Subject: SUSE-SU-2026:24401-1: important: Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179326318207.12376.3019350519853849544@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24401-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1932 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_6-rt-17-160000.1.1 * kernel-livepatch-SLE16-RT_Update_1-debugsource-17-160000.1.1 * kernel-livepatch-6_12_0-160000_6-rt-debuginfo-17-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:39:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:39:55 -0000 Subject: SUSE-SU-2026:24400-1: important: Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179326319549.12376.4657767670304207159@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24400-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1931 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16-RT_Update_2-debugsource-15-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:40:10 -0000 Subject: SUSE-SU-2026:24399-1: important: Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179326321054.12376.4647177522740411193@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24399-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1930 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_3-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-14-160000.1.1 * kernel-livepatch-6_12_0-160000_8-rt-debuginfo-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:25 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:40:25 -0000 Subject: SUSE-SU-2026:24398-1: important: Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179326322567.12376.10735181442189489430@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24398-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1929 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-rt-debuginfo-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:39 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:40:39 -0000 Subject: SUSE-SU-2026:24397-1: important: Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179326323983.12376.4724860451679471349@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24397-1 Release Date: 2026-10-19T12:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1928 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_5-debugsource-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-rt-debuginfo-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:40:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:40:53 -0000 Subject: SUSE-SU-2026:24396-1: important: Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179326325363.12376.9390116673226172984@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24396-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1941 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_33-rt-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16-RT_Update_12-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-rt-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:41:07 -0000 Subject: SUSE-SU-2026:24395-1: important: Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179326326703.12376.5929061670062533724@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24395-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1940 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_34-rt-7-160000.1.1 * kernel-livepatch-6_12_0-160000_34-rt-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16-RT_Update_13-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:41:19 -0000 Subject: SUSE-SU-2026:24394-1: important: Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179326327903.12376.10427409786644183699@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24394-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1939 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-rt-debuginfo-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:31 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:41:31 -0000 Subject: SUSE-SU-2026:24393-1: important: Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179326329170.12376.3368884328782187986@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24393-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1938 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-rt-debuginfo-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:41:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:41:46 -0000 Subject: SUSE-SU-2026:24392-1: important: Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179326330658.12376.10479958211636110391@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24392-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1936 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_30-rt-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-rt-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_9-debugsource-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:00 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:42:00 -0000 Subject: SUSE-SU-2026:24391-1: important: Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179326332039.12376.14370106353548671597@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24391-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1935 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_31-rt-debuginfo-9-160000.1.1 * kernel-livepatch-SLE16-RT_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-rt-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:14 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:42:14 -0000 Subject: SUSE-SU-2026:24390-1: important: Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179326333468.12376.2895936204743633939@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24390-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1934 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-rt-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:42:28 -0000 Subject: SUSE-SU-2026:24389-1: important: Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179326334846.12376.16765447261536774440@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24389-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1927 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-debuginfo-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-rt-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:44 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:42:44 -0000 Subject: SUSE-SU-2026:24388-1: important: Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179326336484.12376.7005411024667762327@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24388-1 Release Date: 2026-10-19T12:40:27Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1926 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-SLE16-RT_Update_7-debugsource-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-debuginfo-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-rt-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:42:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:42:54 -0000 Subject: SUSE-SU-2026:24387-1: important: Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179326337428.12376.8319884704832951346@f5dd93353bb2> # Security update for the Linux Kernel RT (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24387-1 Release Date: 2026-10-19T12:38:58Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1937 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_37-rt-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-rt-debuginfo-4-160000.1.1 * kernel-livepatch-SLE16-RT_Update_16-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:45:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:45:55 -0000 Subject: SUSE-SU-2026:24386-1: important: Security update for the Linux Kernel Message-ID: <179326355518.12376.15545239783100374098@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24386-1 Release Date: 2026-10-24T11:15:59Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 * SUSE Linux Micro Extras 6.2 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro Extras 6.2 zypper in -t patch SUSE-SLE-Micro-Extras-6.2-1973 ## Package List: * SUSE Linux Micro Extras 6.2 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-6.12.0-160000.40.1 * kernel-obs-build-debugsource-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 08:46:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 08:46:29 -0000 Subject: SUSE-SU-2026:4926-1: critical: Security update for perl-Cpanel-JSON-XS Message-ID: <179326358980.12376.3915913426473546534@f5dd93353bb2> # Security update for perl-Cpanel-JSON-XS Announcement ID: SUSE-SU-2026:4926-1 Release Date: 2026-10-28T16:22:22Z Rating: critical References: * bsc#1249331 * bsc#1267546 * bsc#1267547 * bsc#1286166 * bsc#1286167 * bsc#1286168 * bsc#1286169 * bsc#1286170 * bsc#1286173 * bsc#1286174 * bsc#1286175 * bsc#1286176 * bsc#1286177 * bsc#1286179 * bsc#1286180 * bsc#1286181 * bsc#1286182 * bsc#1286183 Cross-References: * CVE-2025-40929 * CVE-2026-110672 * CVE-2026-110673 * CVE-2026-110674 * CVE-2026-110675 * CVE-2026-110676 * CVE-2026-110677 * CVE-2026-110678 * CVE-2026-110680 * CVE-2026-110681 * CVE-2026-110682 * CVE-2026-110684 * CVE-2026-110685 * CVE-2026-110686 * CVE-2026-110687 * CVE-2026-110688 * CVE-2026-9334 * CVE-2026-9516 CVSS scores: * CVE-2025-40929 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40929 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40929 ( NVD ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-110672 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110673 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110673 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110674 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110674 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110675 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-110675 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-110676 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110676 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110677 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110677 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110678 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-110678 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-110680 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110680 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110681 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110681 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110682 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N * CVE-2026-110682 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-110684 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110684 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110685 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110685 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-110686 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-110686 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-110687 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-110687 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-110688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-110688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-9334 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-9334 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-9334 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-9516 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9516 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9516 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP7 An update that solves 18 vulnerabilities can now be installed. ## Description: This update for perl-Cpanel-JSON-XS fixes the following issues: * CVE-2025-40929: integer overflow (bsc#1249331). * CVE-2026-9334: type confusion via duplicate object keys when `dupkeys_as_arrayref` is enabled (bsc#1267546). * CVE-2026-9516: denial of service via UTF-8 BOM prefixed input when a decode filter callback throws (bsc#1267547). * CVE-2026-110672: leak of decoded key of an object rejected for a duplicate key or a missing colon in `decode_hv` (bsc#1286166). * CVE-2026-110673: stack exhaustion via nested tagged values under `allow_tags` in `decode_tag` (bsc#1286167). * CVE-2026-110674: duplicate non-ASCII bare keys are missed, allowing type confusion under `dupkeys_as_arrayref` in `decode_hv` (bsc#1286168). * CVE-2026-110675: malformed UTF-8 accepted in bare hash keys under `allow_barekey` in `decode_hv` (bsc#1286169). * CVE-2026-110676: memory exhaustion by encoding exponent notation as full decimal digits under `allow_bignum` (bsc#1286170). * CVE-2026-110677: array collecting duplicate key values leaked under `dupkeys_as_arrayref` in `decode_hv` (bsc#1286173). * CVE-2026-110678: memory exhaustion by buffering incremental input past `max_size` in `incr_parse` (bsc#1286174). * CVE-2026-110680: out-of-bounds write when a tied or shared hash grows during canonical encoding in `encode_hv` (bsc#1286175). * CVE-2026-110681: parent interpreter's scalars from a parser object cloned into a new `ithread` (bsc#1286176). * CVE-2026-110682: input chunking can change the decoded value of top-level numbers in `incr_parse` (bsc#1286177). * CVE-2026-110684: memory leaked and overloaded objects retained when encoding values as strings in `encode_stringify` (bsc#1286179). * CVE-2026-110685: decoded arguments of a tagged value leaked when its THAW method dies in `decode_tag` (bsc#1286180). * CVE-2026-110686: freed filter callbacks used when a filter removes itself during decoding in `decode_hv` (bsc#1286181). * CVE-2026-110687: byte-string keys misordered during canonical encoding in `utf16_cmp` (bsc#1286182). * CVE-2026-110688: quadratic CPU use due to remaining buffer revalidation per value in `incr_parse` (bsc#1286183). Changes for perl-Cpanel-JSON-XS: * updated to 4.800.0 (4.80) * Add version markers to all module files. (PR #260 demerphq) * Use utf8n_to_uvchr on Perl 5.32 and later to avoid the deprecated utf8n_to_uvuni API. (PR #260 demerphq) * Add schema-based validation for decoded JSON (GH #238): Cpanel::JSON::XS::Type now provides check_type($data, $schema[, $found_type]), which validates an already-decoded perl structure against a type spec built from the existing encoder building blocks (JSON_TYPE_* / json_type_arrayof / json_type_hashof / json_type_anyof), plus the new json_type_optional() for hash keys that may be absent, and short scalar type name sugar ('Str', 'Int', 'Float', 'Bool', 'Null', 'Any', and nullable 'Str?' etc.) so a schema reads as "just a hash of keys and types", as requested. Unlike the encoder's hash type spec, a plain hashref schema is closed: unknown keys and missing required keys are reported. New $json->decode_and_validate($json_text, $schema) method decodes and croaks with all mismatches if validation fails, using decode()'s own type introspection as ground truth to avoid perl's usual dual-var/stringified- number ambiguity. * json_type_optional() and the nullable '?' type-name suffixes ('Str?', 'Int?', 'Float?', 'Bool?') give schemas an explicit way to declare a key/value as optional instead of demanding a complete type specification for every key. The encoder now also understands json_type_optional() directly (it unwraps to the wrapped type, since encode() only ever sees keys that are actually present): the exact same type spec built for check_type()/decode_and_validate() can now be handed to encode() as-is, instead of croaking with "no type was specified for hash key '...'" for every optional key. Encoding stays strict by default otherwise: a hash key with no entry at all in the type spec still croaks (GH #242). eg/bench_large.pl: old encode: 20.5--22.9/s decode: 16.2--16.5/s for 4.53 new encode: 21.1--22.5/s decode: 15.7--16.3/s for 4.80 4.53 2026-09-28 (rurban) * Fix C90 violations with arm neon (GH #258 rjbs) * Added a native arm64 test runner. * updated to 4.520.0 (4.52) 4.52 2026-09-12 (rurban) * OSX 10.9 fix for SIMD UTF-8 (Christian Carey) * Change my maintainer email to reini.urban at gmail.com 4.51 2026-09-11 (rurban) * Add faster SIMD UTF-8 validation (GH #213, Zhang Boyang) * Fix tests for yath (GH #255, with H.Merijn Brand): the test files now work with Test2::Harness instead of only Test::Harness, and a yath run is added to `make xtest` when yath is installed. * Skip one t/117_numbers.t test on Perls with 32-bit IVs (GH #254, Jeremy Hansen). 4.50 2026-09-08 (rurban) * Add $json->encode_to($fh, $data, [$type]) to stream encoded JSON directly to a filehandle instead of building the whole result in memory (GH #250, requested by yairlenga. designed 2016 in GH #58). Internally flushes a bounded 8k chunk buffer as it fills, keeping peak memory bounded for large data structures. * Encoder performance improvements suggested in GH #237 (17dec): * Large-integer encoding now uses a 100-digit lookup table instead of snprintf, roughly 2x faster for integers outside the existing branchless small-integer fast path (|value| > 59000). * encode_str now bulk-copies runs of consecutive bytes that need no escaping instead of a need()+store per byte, notably faster for strings with few or no characters to escape. Added eg/bench_large.pl with results. * updated to 4.440.0 (4.44) 4.44 2026-09-02 (rurban) * Fix canonical sort infinite loop (GH #252 amelchio): malformed UTF-8 keys (e.g. Latin-1 byte strings mixed with Unicode) made utf16_cmp treat the decoder's (STRLEN)-1 malformed sentinel as a length, wrapping the buffer pointer. Now checked as 0 or > remaining length. * updated to 4.430.0 (4.43) 4.43 2026-07-18 (rurban) * Fix canonical sort: compare by UTF-16 code units per RFC 8785 (GH #248, leont) * Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts UTF-8 decoding instead of checking SvUTF8 flag, since older Perls may store valid UTF-8 hash keys without the flag set. * Fix quadmath encode dropping ".0" for large floats (GH #246, reported by Tux). The .0 guard condition that suppressed appending for NV values > UV_MAX was incorrect on high-precision FP (quadmath, 128-bit long double on arm64) where %g uses fixed-point notation for values like 1.01e30. Guarded with #if NV_DIG < 31 to skip only on double/80-bit-ld where %g naturally uses %e for large values. * updated to 4.420.0 (4.42) 4.42 2026-06-27 (rurban) * Ensure encode with a type spec hashref does not change the hashref argument (GH #240) * Fix -e docs: "written" -> "read" (GH #239, reported by Ron Savage). * Fix Boolean eq overload matching undef (GH #207, reported by fd-t). Cpanel::JSON::XS::Boolean overloaded eq would match undef as equal to false because undef stringifies to "". Added defined() guard. * Fix error messages showing overloaded stringification for blessed objects (GH #191, reported by karenetheridge). Error messages now use ClassName=TYPE(addr) format, bypassing any "" overload. * Fix type_all_string overriding allow_blessed/convert_blessed (GH #175, reported by alpha6). With type_all_string + allow_blessed, blessed objects are now encoded as null (not stringified as HASH address). * Fix infinite recursion when encode is called from a "" overload (GH #128, reported by pbrthemaster). The recursion guard temporarily clears convert_blessed and allow_stringify flags on the JSON object before calling the overload, preventing re-entrant encode loops. * Fix $obj->new creating a broken object (GH #93, reported by cpansprout). When new() is called on an existing object (e.g. $json->new->new), the class name is now extracted from the object's stash rather than using the stringified reference. * Change allow_nonref default to true (GH #241, matching JSON::PP and JSON::XS 4.0+ and the insecure RFC 7159). encode and decode now accept non-reference values by default. decode_json() with an explicit 0/1 second argument still works. allow_nonref(0) to disable scalars-only for secure JSON. * Fix minor t/12_blessed.t typo. * Fix GH #112: encode large whole-number NV values without .0 on 32-bit Perl (values exceeding UV_MAX that Perl stores as float). * Fix GH #197: prefer IOK over pNOK when encoding values where IV is accurate but NV is imprecise (SvNOK not set). * updated to 4.410.0 (4.41) 4.41 2026-05-27 (rurban) * Fix incr_parse single-quote string delimiter (GH #245, reported by Paul Johnson) * Fix a one-byte out-of-bounds heap read reachable via allow_barekey on truncated input (GH #244, reported by Paul Johnson) * updated to 4.400.0 (4.40) 4.40 2025-09-07 (rurban) * Fix CVE-2025-40929 overflow with overlong numbers, fuzzing only. * Detect more malformed numbers, with two decimal points. * Pin github actions to latest @v via pinact run -u (bsc#1249331) * updated to 4.390.0 (4.39) 4.39 2024-12-12 (rurban) * Fix Windows -Dusequadmath (sisyphus GH #235, GH #229) * Fix inconsistent behavior between decoding escaped and unescaped surrogates, and escaped non-characters vs non-escaped non-characters. Now aligned to JSON::PP (Gavin Hayes GH #233, GH #227) * Add type_all_string tests (Bernhard Schmalhofer GH #236) * Silence UV to char cast warnings (bulk88 GH #232) * Fix MSVC preprocessor errors (bulk88 GH #232) * Fix -Wformat warnings on Windows (sisyphus GH #228) * Clarify BigInt decoding (GH #226) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-4926 ## Package List: * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * perl-Cpanel-JSON-XS-debuginfo-4.800.0-150700.3.9.1 * perl-Cpanel-JSON-XS-4.800.0-150700.3.9.1 * perl-Cpanel-JSON-XS-debugsource-4.800.0-150700.3.9.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40929.html * https://www.suse.com/security/cve/CVE-2026-110672.html * https://www.suse.com/security/cve/CVE-2026-110673.html * https://www.suse.com/security/cve/CVE-2026-110674.html * https://www.suse.com/security/cve/CVE-2026-110675.html * https://www.suse.com/security/cve/CVE-2026-110676.html * https://www.suse.com/security/cve/CVE-2026-110677.html * https://www.suse.com/security/cve/CVE-2026-110678.html * https://www.suse.com/security/cve/CVE-2026-110680.html * https://www.suse.com/security/cve/CVE-2026-110681.html * https://www.suse.com/security/cve/CVE-2026-110682.html * https://www.suse.com/security/cve/CVE-2026-110684.html * https://www.suse.com/security/cve/CVE-2026-110685.html * https://www.suse.com/security/cve/CVE-2026-110686.html * https://www.suse.com/security/cve/CVE-2026-110687.html * https://www.suse.com/security/cve/CVE-2026-110688.html * https://www.suse.com/security/cve/CVE-2026-9334.html * https://www.suse.com/security/cve/CVE-2026-9516.html * https://bugzilla.suse.com/show_bug.cgi?id=1249331 * https://bugzilla.suse.com/show_bug.cgi?id=1267546 * https://bugzilla.suse.com/show_bug.cgi?id=1267547 * https://bugzilla.suse.com/show_bug.cgi?id=1286166 * https://bugzilla.suse.com/show_bug.cgi?id=1286167 * https://bugzilla.suse.com/show_bug.cgi?id=1286168 * https://bugzilla.suse.com/show_bug.cgi?id=1286169 * https://bugzilla.suse.com/show_bug.cgi?id=1286170 * https://bugzilla.suse.com/show_bug.cgi?id=1286173 * https://bugzilla.suse.com/show_bug.cgi?id=1286174 * https://bugzilla.suse.com/show_bug.cgi?id=1286175 * https://bugzilla.suse.com/show_bug.cgi?id=1286176 * https://bugzilla.suse.com/show_bug.cgi?id=1286177 * https://bugzilla.suse.com/show_bug.cgi?id=1286179 * https://bugzilla.suse.com/show_bug.cgi?id=1286180 * https://bugzilla.suse.com/show_bug.cgi?id=1286181 * https://bugzilla.suse.com/show_bug.cgi?id=1286182 * https://bugzilla.suse.com/show_bug.cgi?id=1286183 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:32:27 -0000 Subject: SUSE-SU-2026:24458-1: important: Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Message-ID: <179329154761.14553.6073580378612919494@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24458-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1986 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1986 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_1-debugsource-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-18-160000.1.1 * kernel-livepatch-6_12_0-160000_6-default-debuginfo-18-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:32:41 -0000 Subject: SUSE-SU-2026:24457-1: important: Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Message-ID: <179329156149.14553.6983937530390776155@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24457-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1985 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1985 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_26-default-13-160000.1.1 * kernel-livepatch-6_12_0-160000_26-default-debuginfo-13-160000.1.1 * kernel-livepatch-SLE16_Update_5-debugsource-13-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:32:57 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:32:57 -0000 Subject: SUSE-SU-2026:24456-1: important: Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Message-ID: <179329157752.14553.11846661409696984746@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24456-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1984 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1984 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_29-default-10-160000.1.1 * kernel-livepatch-6_12_0-160000_29-default-debuginfo-10-160000.1.1 * kernel-livepatch-SLE16_Update_8-debugsource-10-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:12 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:33:12 -0000 Subject: SUSE-SU-2026:24455-1: important: Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Message-ID: <179329159290.14553.16839489128104497258@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24455-1 Release Date: 2026-10-26T08:48:14Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1983 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1983 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_10-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_31-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:27 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:33:27 -0000 Subject: SUSE-SU-2026:24454-1: important: Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Message-ID: <179329160745.14553.649001728769774664@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24454-1 Release Date: 2026-10-26T08:46:39Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1982 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1982 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_32-default-9-160000.1.1 * kernel-livepatch-SLE16_Update_11-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_32-default-debuginfo-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:41 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:33:41 -0000 Subject: SUSE-SU-2026:24453-1: important: Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Message-ID: <179329162144.14553.17107279793397176174@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24453-1 Release Date: 2026-10-24T16:11:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1981 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1981 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_0-debugsource-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-20-160000.4.3 * kernel-livepatch-6_12_0-160000_5-default-debuginfo-20-160000.4.3 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:33:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:33:54 -0000 Subject: SUSE-SU-2026:24452-1: important: Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Message-ID: <179329163476.14553.9588981916587397335@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24452-1 Release Date: 2026-10-24T12:40:45Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1980 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1980 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-16-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-16-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-debuginfo-16-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:09 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:34:09 -0000 Subject: SUSE-SU-2026:24451-1: important: Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Message-ID: <179329164917.14553.8111802514448504315@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24451-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1979 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1979 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_6-debugsource-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-12-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-debuginfo-12-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:34:23 -0000 Subject: SUSE-SU-2026:24450-1: important: Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Message-ID: <179329166302.14553.10540078009217993560@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24450-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1978 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1978 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_28-default-11-160000.1.1 * kernel-livepatch-6_12_0-160000_28-default-debuginfo-11-160000.1.1 * kernel-livepatch-SLE16_Update_7-debugsource-11-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:34:36 -0000 Subject: SUSE-SU-2026:24449-1: important: Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Message-ID: <179329167691.14553.10524657944926867617@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24449-1 Release Date: 2026-10-24T11:43:30Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1977 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1977 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_9-debugsource-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-debuginfo-9-160000.1.1 * kernel-livepatch-6_12_0-160000_30-default-9-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:34:50 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:34:50 -0000 Subject: SUSE-SU-2026:24448-1: important: Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Message-ID: <179329169086.14553.5738429887093376427@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24448-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1976 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1976 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_33-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_33-default-debuginfo-7-160000.1.1 * kernel-livepatch-SLE16_Update_12-debugsource-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:35:05 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:35:05 -0000 Subject: SUSE-SU-2026:24447-1: important: Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Message-ID: <179329170508.14553.2365058249519270949@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24447-1 Release Date: 2026-10-24T11:41:40Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1975 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1975 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_34-default-debuginfo-7-160000.1.2 * kernel-livepatch-6_12_0-160000_34-default-7-160000.1.2 * kernel-livepatch-SLE16_Update_13-debugsource-7-160000.1.2 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:06 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:38:06 -0000 Subject: SUSE-SU-2026:24446-1: important: Security update for the Linux Kernel Message-ID: <179329188660.14553.17443547135113400690@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24446-1 Release Date: 2026-10-24T10:42:33Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1973 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1973 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * gfs2-kmp-default-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-debugsource-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-devel-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.40.1 * dlm-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-obs-qa-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * dlm-kmp-default-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * gfs2-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * cluster-md-kmp-default-6.12.0-160000.40.1 * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc x86_64) * kernel-azure-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * kernel-azure-extra-6.12.0-160000.40.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-devel-6.12.0-160000.40.1 * kernel-azure-debugsource-6.12.0-160000.40.1 * kernel-default-vdso-6.12.0-160000.40.1 * kernel-azure-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-extra-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-6.12.0-160000.40.1 * kernel-default-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.40.1 * kernel-azure-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.40.1 * kernel-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kernel-devel-6.12.0-160000.40.1 * kernel-source-6.12.0-160000.40.1 * kernel-docs-html-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-source-vanilla-6.12.0-160000.40.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * kernel-64kb-devel-6.12.0-160000.40.1 * kernel-default-base-6.12.0-160000.40.1.160000.2.30 * kernel-64kb-debugsource-6.12.0-160000.40.1 * kernel-64kb-extra-debuginfo-6.12.0-160000.40.1 * kernel-64kb-extra-6.12.0-160000.40.1 * kernel-64kb-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc x86_64) * kernel-azure-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * kernel-azure-extra-6.12.0-160000.40.1 * kernel-azure-devel-6.12.0-160000.40.1 * kernel-azure-debugsource-6.12.0-160000.40.1 * kernel-azure-extra-debuginfo-6.12.0-160000.40.1 * kernel-azure-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kernel-default-extra-debuginfo-6.12.0-160000.40.1 * kernel-syms-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * kernel-obs-qa-6.12.0-160000.40.1 * kernel-default-extra-6.12.0-160000.40.1 * kernel-default-devel-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kernel-devel-6.12.0-160000.40.1 * kernel-source-6.12.0-160000.40.1 * kernel-docs-html-6.12.0-160000.40.1 * kernel-macros-6.12.0-160000.40.1 * kernel-source-vanilla-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-devel-6.12.0-160000.40.1 * kernel-kvmsmall-debugsource-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.40.1 * kernel-default-vdso-6.12.0-160000.40.1 * kernel-azure-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-6.12.0-160000.40.1 * kernel-default-devel-debuginfo-6.12.0-160000.40.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-6.12.0-160000.40.1 * kernel-default-vdso-debuginfo-6.12.0-160000.40.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (ppc64le x86_64) * kernel-default-base-6.12.0-160000.40.1.160000.2.29 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (nosrc s390x) * kernel-zfcpdump-6.12.0-160000.40.1 * SUSE Linux Enterprise Server 16.0 (s390x) * kernel-zfcpdump-debugsource-6.12.0-160000.40.1 * kernel-zfcpdump-debuginfo-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:24 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:38:24 -0000 Subject: SUSE-SU-2026:24444-1: important: Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Message-ID: <179329190485.14553.17757181832037988499@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24444-1 Release Date: 2026-10-24T09:42:10Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1972 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1972 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-15-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-15-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-15-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:40 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:38:40 -0000 Subject: SUSE-SU-2026:24443-1: important: Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Message-ID: <179329192070.14553.10726674210280733192@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24443-1 Release Date: 2026-10-24T06:13:29Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272692 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-63939 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63939 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63939 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves seven vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-63939: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272692). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1971 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1971 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_4-debugsource-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-debuginfo-14-160000.1.1 * kernel-livepatch-6_12_0-160000_9-default-14-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-63939.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272692 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:46 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:38:46 -0000 Subject: SUSE-SU-2026:24442-1: moderate: Security update for rabbitmq-server Message-ID: <179329192654.14553.271801674005391638@8cb11e3fd1c0> # Security update for rabbitmq-server Announcement ID: SUSE-SU-2026:24442-1 Release Date: 2026-10-23T17:13:02Z Rating: moderate References: * bsc#1271338 Cross-References: * CVE-2026-57215 CVSS scores: * CVE-2026-57215 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N * CVE-2026-57215 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-57215 ( NVD ): 7.0 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-57215 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for rabbitmq-server fixes the following issue: * CVE-2026-57215: direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom (bsc#1271338). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1970 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1970 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * erlang-rabbitmq-client-4.1.5-160000.3.1 * rabbitmq-server-4.1.5-160000.3.1 * rabbitmq-server-plugins-4.1.5-160000.3.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * rabbitmq-server-bash-completion-4.1.5-160000.3.1 * rabbitmq-server-zsh-completion-4.1.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * erlang-rabbitmq-client-4.1.5-160000.3.1 * rabbitmq-server-4.1.5-160000.3.1 * rabbitmq-server-plugins-4.1.5-160000.3.1 * SUSE Linux Enterprise Server 16.0 (noarch) * rabbitmq-server-bash-completion-4.1.5-160000.3.1 * rabbitmq-server-zsh-completion-4.1.5-160000.3.1 ## References: * https://www.suse.com/security/cve/CVE-2026-57215.html * https://bugzilla.suse.com/show_bug.cgi?id=1271338 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:38:54 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:38:54 -0000 Subject: SUSE-SU-2026:24441-1: moderate: Security update for haproxy Message-ID: <179329193406.14553.665103678698714881@8cb11e3fd1c0> # Security update for haproxy Announcement ID: SUSE-SU-2026:24441-1 Release Date: 2026-10-23T17:10:20Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Enterprise Server for SAP applications 16.0 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1969 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 * haproxy-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:07 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:39:07 -0000 Subject: SUSE-SU-2026:24440-1: important: Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Message-ID: <179329194756.14553.9805877123274468807@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24440-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1968 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1968 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_14-debugsource-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-7-160000.1.1 * kernel-livepatch-6_12_0-160000_35-default-debuginfo-7-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:20 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:39:20 -0000 Subject: SUSE-SU-2026:24439-1: important: Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Message-ID: <179329196034.14553.18018266667603662932@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24439-1 Release Date: 2026-10-23T15:22:57Z Rating: important References: * bsc#1269775 * bsc#1271965 * bsc#1272136 * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-53131 * CVE-2026-63794 * CVE-2026-63795 * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-53131 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53131 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-53131 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H * CVE-2026-63794 ( SUSE ): 7.5 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63794 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63794 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63795 ( NVD ): 10.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves six vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: * CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269775). * CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271965). * CVE-2026-63795: 9p: avoid putting oldfid in p9_client_walk() error path (bsc#1272136). * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1967 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1967 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-SLE16_Update_15-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_36-default-debuginfo-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-53131.html * https://www.suse.com/security/cve/CVE-2026-63794.html * https://www.suse.com/security/cve/CVE-2026-63795.html * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1269775 * https://bugzilla.suse.com/show_bug.cgi?id=1271965 * https://bugzilla.suse.com/show_bug.cgi?id=1272136 * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:39:29 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:39:29 -0000 Subject: SUSE-SU-2026:24438-1: important: Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Message-ID: <179329196943.14553.16774562080905519383@8cb11e3fd1c0> # Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:24438-1 Release Date: 2026-10-23T15:20:40Z Rating: important References: * bsc#1272386 * bsc#1272895 * bsc#1276303 Cross-References: * CVE-2026-63887 * CVE-2026-64054 * CVE-2026-68158 CVSS scores: * CVE-2026-63887 ( SUSE ): 7.2 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-63887 ( SUSE ): 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-63887 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-64054 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64054 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-68158 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68158 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68158 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves three vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.37.1 fixes various security issues: The following security issues were fixed: * CVE-2026-63887: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (bsc#1272386). * CVE-2026-64054: net: shaper: reject duplicate leaves in GROUP request (bsc#1272895). * CVE-2026-68158: libceph: Fix multiplication overflow in decode_new_up_state_weight() (bsc#1276303). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1966 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1966 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_37-default-debuginfo-4-160000.1.1 * kernel-livepatch-6_12_0-160000_37-default-4-160000.1.1 * kernel-livepatch-SLE16_Update_16-debugsource-4-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-63887.html * https://www.suse.com/security/cve/CVE-2026-64054.html * https://www.suse.com/security/cve/CVE-2026-68158.html * https://bugzilla.suse.com/show_bug.cgi?id=1272386 * https://bugzilla.suse.com/show_bug.cgi?id=1272895 * https://bugzilla.suse.com/show_bug.cgi?id=1276303 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:42:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:42:30 -0000 Subject: SUSE-SU-2026:24437-1: important: Security update for the Linux Kernel Message-ID: <179329215038.14553.10504094881318924319@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:24437-1 Release Date: 2026-10-24T11:15:59Z Rating: important References: * bsc#1215199 * bsc#1234634 * bsc#1264042 * bsc#1267430 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1272509 * bsc#1272898 * bsc#1272901 * bsc#1272952 * bsc#1272955 * bsc#1272956 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274080 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276330 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276907 * bsc#1276951 * bsc#1277103 * bsc#1277174 * bsc#1277260 * bsc#1277338 * bsc#1277357 * bsc#1277599 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277663 * bsc#1277665 * bsc#1277691 * bsc#1277695 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277890 * bsc#1277894 * bsc#1277931 * bsc#1278033 * bsc#1278232 * bsc#1279706 * bsc#1280229 * bsc#1280259 * bsc#1280496 * bsc#1280552 * bsc#1280743 * bsc#1280769 * bsc#1280770 * bsc#1280950 * bsc#1280966 * bsc#1281042 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1282005 * bsc#1282274 * bsc#1282615 * bsc#1282742 * bsc#1282768 * bsc#1282769 * bsc#1282770 * bsc#1282784 * bsc#1282869 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283153 * bsc#1283158 * bsc#1283454 * bsc#1283812 * bsc#1283823 * bsc#1283835 * bsc#1283850 * bsc#1283851 * bsc#1283853 * bsc#1283855 * bsc#1283856 * bsc#1283858 * bsc#1283859 * bsc#1283862 * bsc#1283873 * bsc#1283877 * bsc#1283894 * bsc#1283936 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284064 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284298 * bsc#1284310 * bsc#1284312 * bsc#1284408 * bsc#1284412 * bsc#1284415 * bsc#1284419 * bsc#1284422 * bsc#1284424 * bsc#1284462 * bsc#1284559 * bsc#1284581 * bsc#1284605 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 * jsc#PED-14958 Cross-References: * CVE-2026-31731 * CVE-2026-46028 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-64012 * CVE-2026-64058 * CVE-2026-64060 * CVE-2026-64062 * CVE-2026-64063 * CVE-2026-64064 * CVE-2026-64068 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64435 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72110 * CVE-2026-72172 * CVE-2026-72174 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72250 * CVE-2026-72253 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72355 * CVE-2026-72405 * CVE-2026-72493 * CVE-2026-74306 * CVE-2026-74312 * CVE-2026-74368 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74624 * CVE-2026-74715 * CVE-2026-80572 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89558 * CVE-2026-89593 * CVE-2026-89631 * CVE-2026-89636 * CVE-2026-89640 * CVE-2026-89754 * CVE-2026-89755 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-93066 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93785 * CVE-2026-93787 * CVE-2026-93798 * CVE-2026-93806 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97533 * CVE-2026-97554 * CVE-2026-97555 * CVE-2026-97556 * CVE-2026-97558 * CVE-2026-97559 * CVE-2026-97561 * CVE-2026-97562 * CVE-2026-97563 * CVE-2026-97564 * CVE-2026-97942 * CVE-2026-97943 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98125 * CVE-2026-98126 * CVE-2026-98127 * CVE-2026-98130 * CVE-2026-98167 * CVE-2026-98169 * CVE-2026-98170 * CVE-2026-98171 * CVE-2026-98173 * CVE-2026-98174 * CVE-2026-98175 * CVE-2026-98216 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98261 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-31731 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31731 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64058 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64058 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64060 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64060 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64060 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64062 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64062 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64063 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-64063 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-64063 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64064 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64068 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64068 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64435 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72174 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72174 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72250 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L * CVE-2026-72250 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72253 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72253 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72355 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72355 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72355 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72405 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74306 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74368 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74368 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74715 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80572 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80572 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89558 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89558 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89593 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89593 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89631 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89631 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89631 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-89636 ( SUSE ): 7.5 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89636 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-89636 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89640 ( SUSE ): 6.9 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-89640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89640 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-89754 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-89754 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89755 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93066 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93066 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93785 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93785 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93798 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97533 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97533 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97554 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-97554 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97556 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97556 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97558 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97558 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97559 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97559 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-97561 ( SUSE ): 2.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-97561 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-97562 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97562 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97562 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97563 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-97563 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97942 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97943 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98125 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98126 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98127 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98167 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98167 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98169 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-98169 ( NVD ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H * CVE-2026-98170 ( SUSE ): 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L * CVE-2026-98171 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98171 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98171 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98174 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98174 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-98174 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98175 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98175 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98261 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-98261 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that solves 129 vulnerabilities, contains three features and has six fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042). * CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). * CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901). * CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952). * CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955). * CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). * CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663). * CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330). * CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-74715: bpf: Fix netns reference imbalance in conntrack kfuncs (bsc#1277890). * CVE-2026-80572: Input: byd - synchronize timer deletion before freeing private data (bsc#1277338). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89558: md/raid10: fix still_degraded being inverted in raid10_sync_request() (bsc#1280552). * CVE-2026-89593: hugetlb: only adjust reservation during unmapping if mapcount is 0 (bsc#1280229). * CVE-2026-89631: smb: client: reject a tree connect response whose byte count is too small (bsc#1280496). * CVE-2026-89636: smb: client: clear ce->tgthint in free_tgts() (bsc#1281042). * CVE-2026-89640: cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0 (bsc#1280950). * CVE-2026-89754: mm/pagewalk: fix stale walk->action escaping walk_pmd_range() (bsc#1280769). * CVE-2026-89755: mm/migrate_device: clear stale mapping after freeing swapcache (bsc#1280770). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-93066: x86/mm/pat: Take cpa_lock around large-page collapse (bsc#1282274). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93785: cifs: validate idmap key payload length (bsc#1282869). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93798: btrfs: fix reloc root cleanup in merge_reloc_roots() (bsc#1282769). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97533: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF (bsc#1283454). * CVE-2026-97554: smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() (bsc#1283850). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97556: smb: client: avoid leaking refcount when cifs_sb_tlink() fails (bsc#1283853). * CVE-2026-97558: smb: client: fix cifsFileInfo reference leak in deferred close (bsc#1283855). * CVE-2026-97559: smb: client: fail DACL rewrite when the new DACL exceeds 64K (bsc#1283856). * CVE-2026-97561: smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid (bsc#1283858). * CVE-2026-97562: smb: client: pin DFS superblock in iterator callback (bsc#1283862). * CVE-2026-97563: smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() (bsc#1283877). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97942: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). * CVE-2026-97943: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). * CVE-2026-97945: x86/mm: Fix user-space data loss with MADV_FREE and THP (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98125: smb/client: fix stale page cache in insert/collapse range (bsc#1283812). * CVE-2026-98126: smb/client: validate new EOF for zero range (bsc#1283859). * CVE-2026-98127: smb/client: validate new EOF for insert range (bsc#1283873). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98167: smb: client: fix server->total_read for compound encrypted PDUs (bsc#1284422). * CVE-2026-98169: smb: client: fix potential OOB read in smb3_enum_snapshots() (bsc#1284298). * CVE-2026-98170: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() (bsc#1284310). * CVE-2026-98171: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs (bsc#1284419). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98174: smb: client: fix rlist race and missing initialization (bsc#1284412). * CVE-2026-98175: smb: client: cancel reconnect work in clean_demultiplex_info() (bsc#1284312). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98261: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() (bsc#1284605). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: kABI fix for RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices (git- fixes). * arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems (git-fixes). * arm64: cpufeature: Make PMUVer and PerfMon unsigned (git-fixes). * arm64: errata: Add Cortex-A725 erratum 3821522 workaround (git-fixes) Enable workaround by default for aarch64. * arm64: errata: Factor out broken AMU const counter cap (git-fixes) Enable this workaround by default for aarch64. * arm64: errata: Workaround for SI L1 downstream coherency issue (git-fixes) Enable workaround by default for aarch64. * arm64: irq: exclude the softirq stack switch from KCOV (git-fixes). * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) (stable- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data (stable-fixes). * ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality (stable-fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: Add shared HW reset for clean start (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table (stable-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() (git- fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: add VTL2 redirect connection ID (git-fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs (stable- fixes). * drm/amdgpu/gfx6: fix firmware leak on teardown (stable-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdgpu: make Mac FB workaround generic (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro14,3 (stable-fixes). * drm/amdgpu: reset VI ASIC on MacBookPro15,1 (stable-fixes). * drm/amdgpu: serialize vblank counter reads against GPU reset (stable-fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Fix binner slot allocation failing on an idle GPU (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * drm/vc4: Make v3d paths unavailable on any generation newer than vc4 (stable-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * i2c: at91: release DMA channels when probe defers (git-fixes). * i2c: xiic: don't clobber msg->len to signal block-read completion (git- fixes). * i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode (stable-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * iio: accel: kionix-kx022a: Prevent memory leak and fix state (git-fixes). * iio: accel: kx022a: Use cleanup.h helpers (stable-fixes). * iio: adc: aspeed: propagate reset deassert errors (git-fixes). * iio: adc: aspeed: Simplify with dev_err_probe (stable-fixes). * iio: bu27034: simplify using guard(mutex) (stable-fixes). * iio: imu: adis16480: fix unprotected debugfs reads (git-fixes). * iio: light: rohm-bu27034: Fix error return (git-fixes). * iio: light: rohm-bu27034: Fix infinite delay on error (git-fixes). * Input: ati_remote2 - fix type confusion in device attribute handlers (git- fixes). * Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 (stable- fixes). * Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 (stable-fixes). * Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 (stable-fixes). * Input: xpad - add support for Corsair Novablade Pro (stable-fixes). * iommu/tegra241-cmdqv: Set supports_cmd op in tegra241_vcmdq_hw_init() (git- fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * net: usb: qmi_wwan: add Quectel EG120K-EA (stable-fixes). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13 (git-fixes). * pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12 (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 (git- fixes). * sched/debug: Change SCHED_WARN_ON() to WARN_ON_ONCE() (jsc#PED-14958 bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/eevdf: Update se->vprot in reweight_entity() (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag") (bsc#1234634 (Scheduler functional and performance backports SL-16.1) bsc#1282005). * smb: client: harden DFS cache against invalid target hints (git-fixes). * smb: client: use kzalloc to zero-initialize security descriptor buffer (git- fixes). * smb: common: change the data type of num_aces to le16 (git-fixes). * thunderbolt: Disable CL states for the Anker Prime TB5 dock (stable-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * tpm: Initialize name_size_alg for non-NULL name in tpm_buf_append_name() (stable-fixes). * usb: f81604: fix struct f81604_int_data size mismatch (git-fixes). * usb: ohci-spear: disable controller wakeup on removal (git-fixes). * usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() (stable-fixes). * USB: serial: cp210x: add Corsair AX1500i Power Supply (stable-fixes). * USB: serial: option: add Compal EXC-T1 support (stable-fixes). * USB: serial: option: add Compal EXM-G1x support (stable-fixes). * USB: serial: option: add Quectel EG060W (stable-fixes). * USB: serial: option: add Quectel RG660QB (stable-fixes). * USB: serial: option: add support for SIMCom SIM8260C (stable-fixes). * wifi: ath9k: reject short WMI command responses (git-fixes). * wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE (git-fixes). * wifi: ath11k: reset ar->num_stations on hardware start (git-fixes). * wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" (stable-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: cfg80211: preserve hidden-group beacon IE ownership (git-fixes). * wifi: cw1200: fix TX padding OOB read leaking heap data to device (git- fixes). * wifi: iwlegacy: 3945: free EEPROM data on remove (git-fixes). * wifi: mac80211: account proxy paths against the mesh path limit (git-fixes). * wifi: mac80211: Add 802.3 multicast encapsulation offload support (stable- fixes). * wifi: mac80211: Add multicast to unicast support for 802.3 path (stable- fixes). * wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() (stable-fixes). * wifi: mac80211: drain PS delivery work during station teardown (git-fixes). * wifi: mac80211: fix mesh fast xmit path deletion UAF (git-fixes). * wifi: mac80211: handle empty FILS association request payload (git-fixes). * wifi: mac80211: keep fallback association elements alive (git-fixes). * wifi: mac80211: keep paired old chanctx alive (git-fixes). * wifi: mac80211: minstrel_ht: validate fixed rate index (git-fixes). * wifi: mac80211: prevent AP VLAN tx from other interfaces (git-fixes). * wifi: mac80211: reject invalid 320 MHz CSA bandwidth (git-fixes). * wifi: mac80211: release mesh path quota on failed additions (git-fixes). * wifi: mac80211: set info->band for 802.3 encap offload frames (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * wifi: mt76: mt7915: disable rx napi when removing device (git-fixes). * wifi: mt76: mt7925: don't put the band auto marker in TGID (git-fixes). * wifi: mt76: mt7925: restore the legacy BSS after MLO teardown (git-fixes). * wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout (git-fixes). * wifi: wfx: validate MIB read length before copying to caller (git-fixes). * wifi: wlcore: Fix runtime PM leak in wlcore_remove() (git-fixes). * x86/bugs: Adapt SRSO mitigation to Zen6 (bsc#1282615). * x86/bugs: Add attack vector controls for VMSCAPE (git-fixes). * x86/bugs: Remove dead code which might prevent from building (git-fixes). * x86/bugs: Remove uses of cpu_mitigations_off() (git-fixes). * x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (git-fixes). * x86/bugs: Simplify SSB cmdline parsing (git-fixes). * x86/bugs: Use early_param() for spectre_v2 (git-fixes). * x86/bugs: Use early_param() for spectre_v2_user (git-fixes). * x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index() (git- fixes). * x86/mm: Drop unnecessary PMD page copy when freeing (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1973 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * gfs2-kmp-default-6.12.0-160000.40.1 * cluster-md-kmp-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debuginfo-6.12.0-160000.40.1 * kernel-default-debugsource-6.12.0-160000.40.1 * dlm-kmp-default-debuginfo-6.12.0-160000.40.1 * dlm-kmp-default-6.12.0-160000.40.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.40.1 * cluster-md-kmp-default-6.12.0-160000.40.1 * SUSE Linux Enterprise Server High Availability Extension 16.0 (nosrc) * kernel-default-6.12.0-160000.40.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31731.html * https://www.suse.com/security/cve/CVE-2026-46028.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64058.html * https://www.suse.com/security/cve/CVE-2026-64060.html * https://www.suse.com/security/cve/CVE-2026-64062.html * https://www.suse.com/security/cve/CVE-2026-64063.html * https://www.suse.com/security/cve/CVE-2026-64064.html * https://www.suse.com/security/cve/CVE-2026-64068.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64435.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72174.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72250.html * https://www.suse.com/security/cve/CVE-2026-72253.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72355.html * https://www.suse.com/security/cve/CVE-2026-72405.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74306.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74368.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-74715.html * https://www.suse.com/security/cve/CVE-2026-80572.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89558.html * https://www.suse.com/security/cve/CVE-2026-89593.html * https://www.suse.com/security/cve/CVE-2026-89631.html * https://www.suse.com/security/cve/CVE-2026-89636.html * https://www.suse.com/security/cve/CVE-2026-89640.html * https://www.suse.com/security/cve/CVE-2026-89754.html * https://www.suse.com/security/cve/CVE-2026-89755.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-93066.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93785.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93798.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97533.html * https://www.suse.com/security/cve/CVE-2026-97554.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97556.html * https://www.suse.com/security/cve/CVE-2026-97558.html * https://www.suse.com/security/cve/CVE-2026-97559.html * https://www.suse.com/security/cve/CVE-2026-97561.html * https://www.suse.com/security/cve/CVE-2026-97562.html * https://www.suse.com/security/cve/CVE-2026-97563.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97942.html * https://www.suse.com/security/cve/CVE-2026-97943.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98125.html * https://www.suse.com/security/cve/CVE-2026-98126.html * https://www.suse.com/security/cve/CVE-2026-98127.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98167.html * https://www.suse.com/security/cve/CVE-2026-98169.html * https://www.suse.com/security/cve/CVE-2026-98170.html * https://www.suse.com/security/cve/CVE-2026-98171.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98174.html * https://www.suse.com/security/cve/CVE-2026-98175.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98261.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1234634 * https://bugzilla.suse.com/show_bug.cgi?id=1264042 * https://bugzilla.suse.com/show_bug.cgi?id=1267430 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1272509 * https://bugzilla.suse.com/show_bug.cgi?id=1272898 * https://bugzilla.suse.com/show_bug.cgi?id=1272901 * https://bugzilla.suse.com/show_bug.cgi?id=1272952 * https://bugzilla.suse.com/show_bug.cgi?id=1272955 * https://bugzilla.suse.com/show_bug.cgi?id=1272956 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274080 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276330 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276907 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277103 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277338 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277663 * https://bugzilla.suse.com/show_bug.cgi?id=1277665 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277695 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277890 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278033 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280229 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280496 * https://bugzilla.suse.com/show_bug.cgi?id=1280552 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280769 * https://bugzilla.suse.com/show_bug.cgi?id=1280770 * https://bugzilla.suse.com/show_bug.cgi?id=1280950 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281042 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282005 * https://bugzilla.suse.com/show_bug.cgi?id=1282274 * https://bugzilla.suse.com/show_bug.cgi?id=1282615 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282769 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282869 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283153 * https://bugzilla.suse.com/show_bug.cgi?id=1283158 * https://bugzilla.suse.com/show_bug.cgi?id=1283454 * https://bugzilla.suse.com/show_bug.cgi?id=1283812 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283850 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283853 * https://bugzilla.suse.com/show_bug.cgi?id=1283855 * https://bugzilla.suse.com/show_bug.cgi?id=1283856 * https://bugzilla.suse.com/show_bug.cgi?id=1283858 * https://bugzilla.suse.com/show_bug.cgi?id=1283859 * https://bugzilla.suse.com/show_bug.cgi?id=1283862 * https://bugzilla.suse.com/show_bug.cgi?id=1283873 * https://bugzilla.suse.com/show_bug.cgi?id=1283877 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284298 * https://bugzilla.suse.com/show_bug.cgi?id=1284310 * https://bugzilla.suse.com/show_bug.cgi?id=1284312 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284412 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284419 * https://bugzilla.suse.com/show_bug.cgi?id=1284422 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284605 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 * https://jira.suse.com/browse/PED-14958 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:42:36 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:42:36 -0000 Subject: SUSE-SU-2026:24436-1: moderate: Security update for haproxy Message-ID: <179329215659.14553.18256373269942626070@8cb11e3fd1c0> # Security update for haproxy Announcement ID: SUSE-SU-2026:24436-1 Release Date: 2026-10-23T17:14:51Z Rating: moderate References: * bsc#1285046 Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server High Availability Extension 16.0 An update that has one fix can now be installed. ## Description: This update for haproxy fixes the following issue: * h1-htx: report an error on a too long chunk-size line (bsc#1285046). Changes for haproxy: * Otel Update to version 2.3.0+git2.b031728: * DOC: otel: added a security policy to the repository * MINOR: otel: test: added a test with an optional upstream context * VERSION: otel: bumped filter version to 2.3.0 * DOC: otel: shortened the repeated passages of the implementation guide * BUG/MINOR: otel: left a baggage pair out when its sample yielded nothing * DOC: otel: completed the stream stop notes and the function reference * DOC: otel: added the load-time warnings and missing rules to the guides * DOC: otel: corrected stale statements across the guides and notes * DOC: otel: corrected and completed the keyword guides * CLEANUP: otel: marked the code that cannot run with a NOTE comment * CLEANUP: otel: described the invalid-character check modes * MINOR: otel: checked the context field key against the W3C rules * DOC: otel: added an overview of the tests * MINOR: otel: reported the event pairings on the line that completes them * MINOR: otel: warned about an otel-scope that never runs * MINOR: otel: enforced the root span rules * MINOR: otel: validated the span and context names of every reference * MINOR: otel: enforced the rules of the inject and extract context names * MINOR: otel: bound the instrument lines of one name to a single owner * MINOR: otel: let a key repeat once per condition, first match applied * MINOR: otel: gave the 'link' keyword a condition and let it repeat * MINOR: otel: allowed the 'otel-stop' keyword to be repeated * MINOR: otel: ended a sample list at a repeated clause of the same line * MINOR: otel: separated a repeated span line from a redefinition * MINOR: otel: checked the metric instrument line against the SDK rules * MINOR: otel: allowed each otel-instrumentation keyword only once * MINOR: otel: required the configuration to live inside an OTel scope * MINOR: otel: allowed the configuration sections in any order * MINOR: otel: rejected a bare 'if' or 'unless' with no ACL term * MINOR: otel: made an ACL name unique within its section * BUG/MINOR: otel: allowed a condition to mix ACLs from the three lists * MINOR: otel: refused the reserved words as names and limited the length * MINOR: otel: named the sample key where the value stands on its own * BUG/MINOR: otel: read the whole filter line before its configuration * BUG/MINOR: otel: allowed a repeated sample expression in one value * BUG/MINOR: otel: stopped measuring a sample expression as a name * BUG/MINOR: otel: named the 'config' keyword in its own parse error * CLEANUP: otel: compared the baggage carrier key without case folding * CLEANUP: otel: replaced the word 'verbatim' in the comments and guides * CLEANUP: otel: added the entry traces to the functions that lacked them * CLEANUP: otel: collected the repeated error messages into macros * MINOR: otel: test: added the configuration parser test * DOC: otel: added the keyword definition rules and updated the guides * CLEANUP: otel: replaced the word 'gate' in the comments and guides * MINOR: otel: warned about the events the filter placement never fires * BUG/MINOR: otel: kept a backend filter from re-running the frontend rules * BUG/MINOR: otel: fired on-server-unavailable when no server was reached * BUG/MINOR: otel: armed the idle timer for a filter of a backend section * MINOR: otel: required every otel-group to be named on a 'groups' line * BUG/MINOR: otel: cleared the section state after an aborted parse * BUG/MINOR: otel: gave the events that run on no channel a usable direction * CLEANUP: otel: used the span event dump macro where the events are handled * MINOR: otel: checked 'extract use-headers' against the scope event * BUG/MINOR: otel: kept the session alive when a root scope is skipped * CLEANUP: otel: collected the session disabling into one function * LICENSE: otel: added the LICENSE file and moved the headers to the GPL * MINOR: otel: added a sampler level to the speed test * MINOR: otel: evaluated the samples in a trash buffer * MEDIUM: otel: skipped the samples of a span that records nothing * Update to version 3.4.7+git0.8872a2604: * [RELEASE] Released version 3.4.7 * BUG/MAJOR: h1-htx: report an error on a too long chunk-size line (bsc#1285046) * BUG/MAJOR: mux-h2: properly handle short reads on PING frames * BUG/MINOR: cfgparse-global: only warn when "localpeer" is set together with -L * REGTEST: ssl: require OpenSSL 1.1.1 for crt-list ciphersuites tests * REGTESTS: http-messaging: Fix http_fail_cnt_body to succeed with small timeouts * BUG/MEDIUM: mux-h1: only accept the H2 preface on the first request * BUG/MINOR: http-fetch: don't report pseudo-headers in TCP mode * BUG/MEDIUM: mux-h1: also release the embryonic stream when the error is empty * BUG/MEDIUM: mux-h2: fix a possible crash on rxbuf allocation failure * BUG/MEDIUM: mux-h2: report a dead rhttp connection in h2_wake() * BUG/MEDIUM: mux-h1: don't pass an upgraded connection to traces in h1s_destroy() * BUG/MEDIUM: mux-fcgi: don't return a freed tasklet from fcgi_deferred_shut() * BUG/MEDIUM: mux-h2: don't return a freed tasklet from h2_deferred_shut() * BUG/MINOR: hlua: assume proxy_find_by_id() may return NULL on previously existing server * BUG/MINOR: spoe: Fix the message list splice with an empty list * REGTESTS: log: check that a log-forward TCP session ends on client close * BUG/MEDIUM: log: do not ignore the peer's shutdown in the syslog applet * REGTESTS: cli: test a command line of exactly tune.bufsize bytes * BUG/MEDIUM: cli: fix the last command detection on a full command line * BUG/MINOR: cfgparse-listen: complete the list of options for the suggestions * BUG/MINOR: proxy: also look for the closest option among cfg_opts3 * BUG/MINOR: cfgparse-listen: properly reject extra args in a backend section * BUG/MINOR: cfgparse-listen: fix quoting of the condition conflict warning * BUG/MINOR: cfgparse-listen: fix the argument checked by "email-alert" * BUG/MINOR: cfgparse-listen: release the previous description of the proxy * BUG/MINOR: cfgparse-global: add missing calloc() check for the global description * BUG/MINOR: cfgparse-global: add missing gotos to error label in max-spread- checks * BUG/MAJOR: cfgparse: properly check userlist section when scanning keywords * MINOR: doc: elaborate on diagnostic mode behavior * BUG/MINOR: ssl: Fix potential NULL-deref in "dump ssl cert" with AWS-LC * BUG/MINOR: h3: reject RS/SS for QPACK uni streams * BUG/MINOR: h3: close connection on GOAWAY frame too long * BUG/MINOR: h3: reject frames with truncated header * BUG/MINOR: mux_quic: extend FINAL_SIZE_ERROR detection on stream * BUG/MINOR: ssl: use standard names for X25519 and X448 groups * BUG/MEDIUM: listener: Consider maxconn before waking listeners * BUG/MEDIUM: ssl: crt-list curves ignored with AWS-LC * BUG/MEDIUM: ssl: crt-list ciphers ignored with AWS-LC * BUG/MINOR: ssl: fix trace crash on BE conn release in io cb * BUG/MINOR: ssl: fix trace crash on FE conn release in io cb * BUG/MINOR: hq-interop: prevent double EOM on request with standalone FIN * BUG/MINOR: log: fix erroneous error message in log-steps parser * MINOR: http-ana: automatically enable http-no-delay for streaming events (SSE) * BUG/MINOR: cli: update wait help usage * BUG/MINOR: server: fix "del server" description * BUG/MINOR: proxy: add PR_CAP_LB for dynamically added backend * DOC: config: mention that url_ip and url_port fail when passed a name * DOC: config: fix doc for hex2i() converter on unparsable input * DOC: config: mention other responses not blocked by option checkcache * BUG/MINOR: sample: return the decoded JWT part when no path is given * BUG/MEDIUM: tcpcheck: do not run a regex on an unallocated buffer * BUG/MINOR: http-fetch: do not count Set-Cookie attributes as cookies * BUG/MINOR: payload: always report a boolean from req.ssl_ec_ext * BUG/MINOR: stick-table: do not count the lookup itself in table_trackers() * BUG/MINOR: http-ana: return a 502 when checkcache blocks a response * BUG/MINOR: sample: make quic_enabled() always succeed * BUG/MINOR: sample: zero-pad the fractional part emitted by http_date() * BUG/MINOR: sample: apply the ms_/us_ time offsets in the input unit * BUG/MINOR: http: do not consume the delimiter of a truncated q-factor * BUG/MINOR: jwe: Avoid buffer overflow in fake cek (RSA1.5) * BUG/MINOR: jwe: Buffer overflow when filling fake cek in case of RSA1.5 * BUG/MEDIUM: pattern: don't dereference static_pattern's data when not filling it * BUG/MEDIUM: stick-table: restrict key sizes to what fits in a buffer * MINOR: stick-table: calculate the on-wire size of each key * MINOR: stick-table: provide a function to estimate on-wire data size * BUILD: haring: fix compile issue due to nop warning. * MINOR: stconn: prefer to replace endpoints rather than detaching them * BUG/MINOR: flt-http-comp: Rely on htx_set_eom() to restore EOM flag * BUG/MEDIUM: flt-http-comp: Block HTX_FL_EOM flag till the end of compression * MINOR: quic: implement the AEAD integrity limit * MEDIUM: jwt: Reject "none" alg in jwt_verify by default * [RELEASE] Released version 3.4.6 * REGTESTS: log: check that a ring's internal server may target a UNIX socket * BUG/MEDIUM: server: skip log backend addr checks for internal proxies * BUG/MEDIUM: sink: reconnect attempt not working after session lasted more than ~25 days * BUG/MAJOR: mux_quic: fix potential crash on RESET_STREAM receive * MINOR: log: add the +utf8 encoding option to let valid UTF-8 pass * MINOR: log: pass the input end to the _lf_encode_bytes() byte encoders * [RELEASE] Released version 3.4.5 * BUG/MINOR: mux-h2: Reject trailers received on a tunneled stream * REGTESTS: log: check the escaping performed by the +json option * BUG/MEDIUM: log: encode the whole non-printable range in the +json output * BUG/MEDIUM: mux_quic: activate timeout on FE init * BUG/MAJOR: mux_quic: fix leak on RESET_STREAM reception * BUG/MINOR: http-ana: restore the transaction status after early hints * BUG/MINOR: tcpcheck: refresh the start-line after updating the authority * BUG/MINOR: mux-h1: only mark C-L and T-E as sent once the header is emitted * BUG/MINOR: http-fetch: fix the space check of http_auth_bearer() * BUG/MINOR: http-fetch: http_auth_bearer() must not match a missing header * BUG/MINOR: http-ana: count response body failures only once in http_fail_cnt * BUG/MEDIUM: tcp-rules: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-act: ignore "capture len" rules evaluated from a backend * BUG/MEDIUM: http-htx: don't build the new authority in a rotating trash chunk * BUG/MEDIUM: log: reserve the trailing 0 in CBOR int and bool encoders * REG-TESTS: http-messaging: Add a script to test interim responses for H1/H2 * BUG/MINOR: mux-h2: Don't expect more HTX data on 1xx interim responses * BUG/MINOR: http-client: Convert server timeout ticks when setting it * BUG/MINOR: ssl: Fix possible null deref on the SSL context in ssl_sock_to_buf() * BUG/MINOR: hlua: release private Lua rule data on teardown * BUG/MAJOR: htx: Check the header/trailer length limits when one is updated * BUG/MINOR: tools: Don't try to anonymize a NULL string * BUG/MEDIUM: htx: Fix the position returned by htx_defrag() * BUG/MEDIUM: http-client/cli: Notify the http-client when the response is consumed * MINOR: http-client: Add a function to notify some data were consumed * BUG/MEDIUM: acme: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * BUG/MEDIUM: ssl/ocsp: Set HTTPCLIENT_O_RES_ACCUM option on the http-client * MINOR: http-client: Add an option to not stop the reception of the response * BUG/MEDIUM: http-client: Don't use the httpclient context if it was released * BUG/MEDIUM: task: Do not destroy a task that is not ours in task_destroy * OPTIM: tools: keep a cache of recent localtime() and gmtime() * MAJOR: filters: Revert the filter-sequence directive * BUG/MINOR: proxy: pass PR_FL_DEF_EXPLICIT_MODE through cascaded defaults * BUG/MEDIUM: tcp-rules: Don't restart tcp-request content evaluation on yield * CLEANUP: stream: Remove an excess newline in the stream dump * BUG/MEDIUM: htx: Reserve a block descriptor for zero-sized blocks * BUG/MEDIUM: ssl: don't set a 0 timeout on an expired TLS session * DOC: configuration: clarify the validity ranges of sample types * REGTESTS: http-rules: check "-m str" on a sample with an embedded \0 * BUG/MINOR: sample: reject a \0 byte in url_dec, json_query and jwt_*_query * BUG/MINOR: ssl: Fix leak of ca_list in cafile_entry * BUG/MINOR: cli: Reject payload with no command * BUG/MEDIUM: cli: Don't read a command or payload line into a full buffer * BUG/MEDIUM: cli: Don't parse next command if input buffer is empty * BUG/MEDIUM: http_act: fix normalize-uri normalizer selection with a condition * REGTESTS: map: check map_regm inside an ACL over an iterating fetch * BUG/MEDIUM: map: do not overwrite the fetch context in pat_match_regm() * BUG/MINOR: ssl: don't pass the address of a size_t as an int* to OpenSSL * BUG/MEDIUM: http-ana: apply tunnel timeout with data filters * BUG/MINOR: h3: only increment frame type counter on new header * BUG/MINOR: h3: handle unknown frame type on request stream as specified * BUG/MINOR: h3: handle empty HEADERS frame as specified * BUG/MEDIUM: h3: do not block FIN on empty DATA frame * BUG/MINOR: h3: reject truncated frames with mandatory payload * BUG/MINOR: stream/debug: harden the stream dump function regarding signals * BUG/MEDIUM: htx: Don't reset flags when source must be preserved during transfer * BUG/MINOR: hlua: Always return nil if there is no data to dup for HTTP messages * BUG/MINOR: mux-h1: Return an error on trailers if last chunk is unfinished * BUG/MEDIUM: hlua: Never release a cosocket applet from the GC * DOC: config: clarify tune tune.bufsize doc regarding various limits * BUG/MINOR: quic: leak of the NEW_TOKEN frame on token generation failure * BUG/MAJOR: h3: reject H3 truncated frames * BUG/MEDIUM: mux-h2: Make sure we remove H2_SF_NOTIFIED on subscribe * MEDIUM: mux-h1: Harden test for short data at end of stream * REGTESTS: log: check that the +cbor output passes the logged bytes through * DOC: config: mention that section 8.6 does not apply to the cbor encoding * REGTESTS: log: check which log-format tags escape control characters * REGTESTS: log: add a test for "show events -s" * MINOR: ring: add "-s" flag to "show events" to sanitize the output * BUG/MINOR: quic: delete the wrong CIDs when post-handshake frames fail * BUG/MINOR: qpack: accept a Required Insert Count which cannot be reached * BUG/MINOR: qpack: encoder and decoder stream data is never consumed * MINOR: quic: protect the ChaCha20 header protection context from being freed * CLEANUP: resolvers: stop clearing the DNS response buffer * BUG/MINOR: resolvers: classify empty truncated responses * BUN/MINOR: hlua: reset hlua_body variable after per-thread files loading * BUG/MEDIUM: filters: check the filter name before comparing it * BUG/MINOR: quic: late packets of the first key phase are dropped * BUG/MEDIUM: quic: crash on key update phase change after a failed one * BUG/MINOR: payload: bound ClientHello extension lists by the extension length * BUG/MINOR: payload: fix the cipher_len bound check in smp_client_hello_parse() * BUG/MEDIUM: mux-spop: Properly handle parsing of split HELLO/DISCONNECT frames * OPTIM: server: remember the lowest known unused server ID * BUG/MINOR: cache: Seed cache primary hash * BUG/MINOR: cache: Manage collisions on primary key * Update to version 3.4.3+git88.24ec4c12d: * BUG/MEDIUM: sink: do not create one implicit ring per logger copy * BUG/MEDIUM: sink: initialize the settings of the implicit log server * BUG/MINOR: flt-http-comp: Don't read next block to detect end of data * BUG/MINOR: fcgi-app: allow explicit filter declaration with non-cache/non- compression filters * BUG/MEDIUM: cache: ignore cache on redundant origin/referer * REGTESTS: converters: use connection: close in the has_ctl() test * MINOR: debug: check the match count in __BUG_ON_ONCE() and not in complain() * MINOR: sample: add new converter has_ctl() to detect control characters * DOC: haterm: add a missing 'haterm' build target on an example * BUG/MEDIUM: sink: do not hold the sft lock around ring_dispatch_messages() * BUG/MEDIUM: connection: fix an infinite loop in the fc_pp_tlv() fetch * MEDIUM: mux-h2: don't report EOM on a short content-length message * BUG/MEDIUM: mux-h1: close the connection on a short content-length ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server High Availability Extension 16.0 zypper in -t patch SUSE-SLES-HA-16.0-1969 ## Package List: * SUSE Linux Enterprise Server High Availability Extension 16.0 (ppc64le s390x x86_64) * haproxy-debuginfo-3.4.7+git0.8872a2604-160000.1.1 * haproxy-debugsource-3.4.7+git0.8872a2604-160000.1.1 * haproxy-3.4.7+git0.8872a2604-160000.1.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1285046 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:45:10 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:45:10 -0000 Subject: SUSE-SU-2026:4935-1: important: Security update for the Linux Kernel Message-ID: <179329231083.14553.9270527308670108584@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4935-1 Release Date: 2026-10-29T10:37:40Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264295 * bsc#1264614 * bsc#1264622 * bsc#1264851 * bsc#1265000 * bsc#1266694 * bsc#1266730 * bsc#1266757 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275518 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1281991 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283795 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283945 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284429 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285880 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43132 * CVE-2026-43184 * CVE-2026-43283 * CVE-2026-43299 * CVE-2026-43457 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-46034 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-90430 * CVE-2026-92488 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97571 * CVE-2026-97574 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43132 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43132 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43184 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-43184 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-43184 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43283 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46034 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * Development Tools Module 15-SP7 * Legacy Module 15-SP7 * Public Cloud Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Availability Extension 15 SP7 * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Linux Enterprise Workstation Extension 15 SP7 An update that solves 108 vulnerabilities, contains two features and has six security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). * CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). * CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283945). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * s390/cio: Purge based on the cdev's online status (bsc#1284429). * s390/topology: Use zero-based numbering for containing (bsc#1275518). * selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Availability Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-HA-15-SP7-2026-4935 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4935 * Development Tools Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Development-Tools-15-SP7-2026-4935 * Legacy Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Legacy-15-SP7-2026-4935 * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4935 Please note that this is the initial kernel livepatch without fixes itself, this package is later updated by separate standalone kernel livepatch updates. * Public Cloud Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP7-2026-4935 * SUSE Linux Enterprise Workstation Extension 15 SP7 zypper in -t patch SUSE-SLE-Product-WE-15-SP7-2026-4935 ## Package List: * SUSE Linux Enterprise High Availability Extension 15 SP7 (aarch64 ppc64le s390x x86_64) * cluster-md-kmp-default-debuginfo-6.4.0-150700.53.87.3 * gfs2-kmp-default-6.4.0-150700.53.87.3 * ocfs2-kmp-default-debuginfo-6.4.0-150700.53.87.3 * dlm-kmp-default-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debugsource-6.4.0-150700.53.87.3 * cluster-md-kmp-default-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * dlm-kmp-default-6.4.0-150700.53.87.3 * ocfs2-kmp-default-6.4.0-150700.53.87.3 * gfs2-kmp-default-debuginfo-6.4.0-150700.53.87.3 * SUSE Linux Enterprise High Availability Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150700.53.87.3.150700.17.49.2 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-default-devel-6.4.0-150700.53.87.3 * kernel-default-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (noarch) * kernel-devel-6.4.0-150700.53.87.3 * kernel-macros-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (nosrc s390x) * kernel-zfcpdump-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150700.53.87.3 * kernel-zfcpdump-debuginfo-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64 nosrc) * kernel-64kb-6.4.0-150700.53.87.3 * Basesystem Module 15-SP7 (aarch64) * kernel-64kb-devel-6.4.0-150700.53.87.3 * kernel-64kb-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-64kb-debuginfo-6.4.0-150700.53.87.3 * kernel-64kb-debugsource-6.4.0-150700.53.87.3 * Development Tools Module 15-SP7 (noarch nosrc) * kernel-docs-6.4.0-150700.53.87.3 * Development Tools Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-obs-build-6.4.0-150700.53.87.2 * kernel-obs-build-debugsource-6.4.0-150700.53.87.2 * kernel-syms-6.4.0-150700.53.87.1 * Development Tools Module 15-SP7 (noarch) * kernel-source-6.4.0-150700.53.87.3 * Legacy Module 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * Legacy Module 15-SP7 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * reiserfs-kmp-default-6.4.0-150700.53.87.3 * reiserfs-kmp-default-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Live Patching 15-SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-default-debuginfo-6.4.0-150700.53.87.3 * kernel-livepatch-SLE15-SP7_Update_23-debugsource-1-150700.15.3.2 * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-livepatch-6_4_0-150700_53_87-default-debuginfo-1-150700.15.3.2 * kernel-livepatch-6_4_0-150700_53_87-default-1-150700.15.3.2 * kernel-default-livepatch-devel-6.4.0-150700.53.87.3 * kernel-default-livepatch-6.4.0-150700.53.87.3 * Public Cloud Module 15-SP7 (aarch64 nosrc x86_64) * kernel-azure-6.4.0-150700.53.87.3 * Public Cloud Module 15-SP7 (aarch64 x86_64) * kernel-azure-debugsource-6.4.0-150700.53.87.3 * kernel-azure-devel-debuginfo-6.4.0-150700.53.87.3 * kernel-azure-debuginfo-6.4.0-150700.53.87.3 * kernel-azure-devel-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Workstation Extension 15 SP7 (nosrc) * kernel-default-6.4.0-150700.53.87.3 * SUSE Linux Enterprise Workstation Extension 15 SP7 (x86_64) * kernel-default-debugsource-6.4.0-150700.53.87.3 * kernel-default-extra-6.4.0-150700.53.87.3 * kernel-default-extra-debuginfo-6.4.0-150700.53.87.3 * kernel-default-debuginfo-6.4.0-150700.53.87.3 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43132.html * https://www.suse.com/security/cve/CVE-2026-43184.html * https://www.suse.com/security/cve/CVE-2026-43283.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-43457.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-46034.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264295 * https://bugzilla.suse.com/show_bug.cgi?id=1264614 * https://bugzilla.suse.com/show_bug.cgi?id=1264622 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1265000 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1266757 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275518 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284429 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285880 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:45:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:45:53 -0000 Subject: SUSE-SU-2026:4937-1: important: Security update for the Linux Kernel Message-ID: <179329235375.14553.12241338391815886344@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4937-1 Release Date: 2026-10-29T11:39:31Z Rating: important References: * bsc#1227103 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277821 * bsc#1280176 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2024-39468 * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2024-39468 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Availability Extension 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves 27 vulnerabilities and has one security fix can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4937 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4937 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4937 * SUSE Linux Enterprise High Availability Extension 15 SP4 zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2026-4937 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-4937 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4937 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4937 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4937 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4937 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4937 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4937 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * gfs2-kmp-default-5.14.21-150400.24.246.1 * cluster-md-kmp-default-5.14.21-150400.24.246.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.246.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * ocfs2-kmp-default-5.14.21-150400.24.246.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise High Availability Extension 15 SP4 (nosrc) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Live Patching 15-SP4 (nosrc) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-livepatch-5_14_21-150400_24_246-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_61-debugsource-1-150400.9.3.1 * kernel-default-livepatch-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-livepatch-5_14_21-150400_24_246-default-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64) * ocfs2-kmp-64kb-5.14.21-150400.24.246.1 * dtb-amlogic-5.14.21-150400.24.246.1 * dtb-sprd-5.14.21-150400.24.246.1 * dlm-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-amazon-5.14.21-150400.24.246.1 * dtb-marvell-5.14.21-150400.24.246.1 * reiserfs-kmp-64kb-5.14.21-150400.24.246.1 * kernel-64kb-extra-debuginfo-5.14.21-150400.24.246.1 * dtb-mediatek-5.14.21-150400.24.246.1 * dtb-altera-5.14.21-150400.24.246.1 * dtb-socionext-5.14.21-150400.24.246.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-optional-debuginfo-5.14.21-150400.24.246.1 * dtb-renesas-5.14.21-150400.24.246.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-lg-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 * kernel-64kb-devel-5.14.21-150400.24.246.1 * kselftests-kmp-64kb-5.14.21-150400.24.246.1 * dtb-exynos-5.14.21-150400.24.246.1 * dtb-xilinx-5.14.21-150400.24.246.1 * dtb-apple-5.14.21-150400.24.246.1 * kernel-64kb-extra-5.14.21-150400.24.246.1 * dtb-hisilicon-5.14.21-150400.24.246.1 * dtb-rockchip-5.14.21-150400.24.246.1 * dtb-broadcom-5.14.21-150400.24.246.1 * kernel-64kb-optional-5.14.21-150400.24.246.1 * dtb-cavium-5.14.21-150400.24.246.1 * dtb-arm-5.14.21-150400.24.246.1 * cluster-md-kmp-64kb-5.14.21-150400.24.246.1 * dtb-amd-5.14.21-150400.24.246.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-allwinner-5.14.21-150400.24.246.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-apm-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * dtb-nvidia-5.14.21-150400.24.246.1 * dtb-qcom-5.14.21-150400.24.246.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150400.24.246.1 * dtb-freescale-5.14.21-150400.24.246.1 * gfs2-kmp-64kb-5.14.21-150400.24.246.1 * dlm-kmp-64kb-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * kselftests-kmp-default-debuginfo-5.14.21-150400.24.246.1 * cluster-md-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-extra-debuginfo-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kselftests-kmp-default-5.14.21-150400.24.246.1 * gfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-debuginfo-5.14.21-150400.24.246.1 * gfs2-kmp-default-5.14.21-150400.24.246.1 * cluster-md-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-qa-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-default-optional-5.14.21-150400.24.246.1 * ocfs2-kmp-default-5.14.21-150400.24.246.1 * ocfs2-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-extra-5.14.21-150400.24.246.1 * kernel-default-livepatch-5.14.21-150400.24.246.1 * kernel-default-devel-5.14.21-150400.24.246.1 * kernel-default-optional-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * dlm-kmp-default-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (nosrc) * dtb-aarch64-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 ppc64le x86_64) * kernel-kvmsmall-devel-5.14.21-150400.24.246.1 * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-kvmsmall-debuginfo-5.14.21-150400.24.246.1 * kernel-kvmsmall-debugsource-5.14.21-150400.24.246.1 * kernel-default-base-rebuild-5.14.21-150400.24.246.1.150400.24.124.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_246-default-debuginfo-1-150400.9.3.1 * kernel-livepatch-SLE15-SP4_Update_61-debugsource-1-150400.9.3.1 * kernel-livepatch-5_14_21-150400_24_246-default-1-150400.9.3.1 * kernel-default-livepatch-devel-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-docs-html-5.14.21-150400.24.246.1 * kernel-source-vanilla-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.246.1 * openSUSE Leap 15.4 (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150400.24.246.1 * kernel-zfcpdump-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 nosrc s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150400.24.246.1.150400.24.124.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150400.24.246.1 * reiserfs-kmp-default-5.14.21-150400.24.246.1 * kernel-obs-build-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-default-debugsource-5.14.21-150400.24.246.1 * kernel-default-devel-5.14.21-150400.24.246.1 * reiserfs-kmp-default-debuginfo-5.14.21-150400.24.246.1 * kernel-obs-build-5.14.21-150400.24.246.1 * kernel-syms-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * kernel-macros-5.14.21-150400.24.246.1 * kernel-devel-5.14.21-150400.24.246.1 * kernel-source-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch nosrc) * kernel-docs-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (s390x) * kernel-zfcpdump-debuginfo-5.14.21-150400.24.246.1 * kernel-zfcpdump-debugsource-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150400.24.246.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64) * kernel-64kb-devel-5.14.21-150400.24.246.1 * kernel-64kb-devel-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debuginfo-5.14.21-150400.24.246.1 * kernel-64kb-debugsource-5.14.21-150400.24.246.1 ## References: * https://www.suse.com/security/cve/CVE-2024-39468.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1227103 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280176 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:46:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:46:35 -0000 Subject: SUSE-SU-2026:4936-1: important: Security update for the Linux Kernel Message-ID: <179329239596.14553.6564507639064809540@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4936-1 Release Date: 2026-10-29T11:33:30Z Rating: important References: * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277742 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72301 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 27 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used. * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4936 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4936 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4936 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-4936 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4936 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4936 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4936 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Live Patching 15-SP5 (nosrc) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_195-default-debuginfo-1-150500.11.3.1 * kernel-default-livepatch-5.14.21-150500.55.195.1 * kernel-livepatch-5_14_21-150500_55_195-default-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_47-debugsource-1-150500.11.3.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * kernel-default-livepatch-devel-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64) * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * dtb-apple-5.14.21-150500.55.195.1 * dtb-hisilicon-5.14.21-150500.55.195.1 * cluster-md-kmp-64kb-5.14.21-150500.55.195.1 * dtb-exynos-5.14.21-150500.55.195.1 * dtb-nvidia-5.14.21-150500.55.195.1 * gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * ocfs2-kmp-64kb-5.14.21-150500.55.195.1 * reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-qcom-5.14.21-150500.55.195.1 * dtb-amlogic-5.14.21-150500.55.195.1 * dtb-altera-5.14.21-150500.55.195.1 * kernel-64kb-extra-5.14.21-150500.55.195.1 * dtb-allwinner-5.14.21-150500.55.195.1 * reiserfs-kmp-64kb-5.14.21-150500.55.195.1 * dtb-broadcom-5.14.21-150500.55.195.1 * kernel-64kb-optional-debuginfo-5.14.21-150500.55.195.1 * dtb-renesas-5.14.21-150500.55.195.1 * kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-64kb-5.14.21-150500.55.195.1 * ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * dtb-lg-5.14.21-150500.55.195.1 * dtb-amd-5.14.21-150500.55.195.1 * dtb-marvell-5.14.21-150500.55.195.1 * kernel-64kb-optional-5.14.21-150500.55.195.1 * dtb-xilinx-5.14.21-150500.55.195.1 * dlm-kmp-64kb-5.14.21-150500.55.195.1 * dtb-freescale-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 * dtb-amazon-5.14.21-150500.55.195.1 * dtb-socionext-5.14.21-150500.55.195.1 * kernel-64kb-extra-debuginfo-5.14.21-150500.55.195.1 * dtb-cavium-5.14.21-150500.55.195.1 * dlm-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-sprd-5.14.21-150500.55.195.1 * dtb-apm-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-mediatek-5.14.21-150500.55.195.1 * dtb-rockchip-5.14.21-150500.55.195.1 * cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.195.1 * dtb-arm-5.14.21-150500.55.195.1 * kselftests-kmp-64kb-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * kernel-obs-qa-5.14.21-150500.55.195.1 * ocfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-optional-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kselftests-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-livepatch-5.14.21-150500.55.195.1 * kernel-default-extra-debuginfo-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kselftests-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * kernel-default-optional-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-default-extra-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (nosrc) * dtb-aarch64-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-debugsource-5.14.21-150500.55.195.1 * kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * kernel-kvmsmall-devel-5.14.21-150500.55.195.1 * kernel-default-base-rebuild-5.14.21-150500.55.195.1.150500.6.91.1 * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150500_55_195-default-1-150500.11.3.1 * kernel-livepatch-SLE15-SP5_Update_47-debugsource-1-150500.11.3.1 * kernel-default-livepatch-devel-5.14.21-150500.55.195.1 * kernel-livepatch-5_14_21-150500_55_195-default-debuginfo-1-150500.11.3.1 * openSUSE Leap 15.5 (x86_64) * kernel-default-vdso-5.14.21-150500.55.195.1 * kernel-default-vdso-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.195.1 * kernel-kvmsmall-vdso-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-vanilla-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * kernel-docs-html-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.195.1 * openSUSE Leap 15.5 (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.195.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64) * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * ocfs2-kmp-default-5.14.21-150500.55.195.1 * gfs2-kmp-default-5.14.21-150500.55.195.1 * dlm-kmp-default-5.14.21-150500.55.195.1 * kernel-default-devel-5.14.21-150500.55.195.1 * ocfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * gfs2-kmp-default-debuginfo-5.14.21-150500.55.195.1 * reiserfs-kmp-default-5.14.21-150500.55.195.1 * reiserfs-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-debugsource-5.14.21-150500.55.195.1 * kernel-default-devel-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-debuginfo-5.14.21-150500.55.195.1 * cluster-md-kmp-default-5.14.21-150500.55.195.1 * kernel-syms-5.14.21-150500.55.195.1 * kernel-default-debuginfo-5.14.21-150500.55.195.1 * kernel-default-debugsource-5.14.21-150500.55.195.1 * dlm-kmp-default-debuginfo-5.14.21-150500.55.195.1 * kernel-obs-build-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-5.14.21-150500.55.195.1.150500.6.91.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * kernel-devel-5.14.21-150500.55.195.1 * kernel-source-5.14.21-150500.55.195.1 * kernel-macros-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc) * kernel-docs-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x) * kernel-zfcpdump-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (s390x) * kernel-zfcpdump-debugsource-5.14.21-150500.55.195.1 * kernel-zfcpdump-debuginfo-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc) * kernel-64kb-5.14.21-150500.55.195.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64) * kernel-64kb-debugsource-5.14.21-150500.55.195.1 * kernel-64kb-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-debuginfo-5.14.21-150500.55.195.1 * kernel-64kb-devel-5.14.21-150500.55.195.1 ## References: * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:18 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:47:18 -0000 Subject: SUSE-SU-2026:4934-1: important: Security update for the Linux Kernel Message-ID: <179329243895.14553.8098069598123588638@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4934-1 Release Date: 2026-10-29T10:35:56Z Rating: important References: * bsc#1257631 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277599 * bsc#1277804 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280743 * bsc#1281280 * bsc#1281819 * bsc#1282932 * bsc#1283144 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284408 * bsc#1284415 * bsc#1284518 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2025-71183 * CVE-2026-72041 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-93787 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97945 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98366 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2025-71183 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-71183 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-71183 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise High Availability Extension 15 SP6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves 29 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4934 * SUSE Linux Enterprise High Availability Extension 15 SP6 zypper in -t patch SUSE-SLE-Product-HA-15-SP6-2026-4934 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2026-4934 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4934 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4934 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * reiserfs-kmp-default-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 * kernel-default-devel-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (nosrc ppc64le x86_64) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * kernel-devel-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (nosrc) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise High Availability Extension 15 SP6 (aarch64 ppc64le s390x x86_64) * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Live Patching 15-SP6 (nosrc) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-default-livepatch-6.4.0-150600.23.143.1 * kernel-livepatch-6_4_0-150600_23_143-default-1-150600.13.5.1 * kernel-livepatch-6_4_0-150600_23_143-default-debuginfo-1-150600.13.5.1 * kernel-livepatch-SLE15-SP6_Update_33-debugsource-1-150600.13.5.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-livepatch-devel-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64) * dlm-kmp-64kb-6.4.0-150600.23.143.1 * kernel-64kb-optional-6.4.0-150600.23.143.1 * kernel-64kb-extra-debuginfo-6.4.0-150600.23.143.1 * dtb-amd-6.4.0-150600.23.143.1 * dtb-nvidia-6.4.0-150600.23.143.1 * dtb-marvell-6.4.0-150600.23.143.1 * dtb-xilinx-6.4.0-150600.23.143.1 * dtb-broadcom-6.4.0-150600.23.143.1 * dtb-apple-6.4.0-150600.23.143.1 * kernel-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-mediatek-6.4.0-150600.23.143.1 * dtb-amazon-6.4.0-150600.23.143.1 * kselftests-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-lg-6.4.0-150600.23.143.1 * dtb-exynos-6.4.0-150600.23.143.1 * kernel-64kb-optional-debuginfo-6.4.0-150600.23.143.1 * dtb-altera-6.4.0-150600.23.143.1 * kernel-64kb-devel-debuginfo-6.4.0-150600.23.143.1 * reiserfs-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-freescale-6.4.0-150600.23.143.1 * dtb-qcom-6.4.0-150600.23.143.1 * dtb-apm-6.4.0-150600.23.143.1 * dtb-renesas-6.4.0-150600.23.143.1 * kernel-64kb-devel-6.4.0-150600.23.143.1 * kernel-64kb-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-hisilicon-6.4.0-150600.23.143.1 * dtb-arm-6.4.0-150600.23.143.1 * dtb-sprd-6.4.0-150600.23.143.1 * gfs2-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-64kb-6.4.0-150600.23.143.1 * dtb-socionext-6.4.0-150600.23.143.1 * cluster-md-kmp-64kb-6.4.0-150600.23.143.1 * dtb-allwinner-6.4.0-150600.23.143.1 * kselftests-kmp-64kb-6.4.0-150600.23.143.1 * reiserfs-kmp-64kb-6.4.0-150600.23.143.1 * dtb-cavium-6.4.0-150600.23.143.1 * kernel-64kb-extra-6.4.0-150600.23.143.1 * dlm-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-amlogic-6.4.0-150600.23.143.1 * ocfs2-kmp-64kb-6.4.0-150600.23.143.1 * cluster-md-kmp-64kb-debuginfo-6.4.0-150600.23.143.1 * dtb-rockchip-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * kernel-default-livepatch-6.4.0-150600.23.143.1 * kernel-default-extra-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kselftests-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-optional-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * kernel-default-devel-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * kselftests-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-obs-qa-6.4.0-150600.23.143.1 * kernel-default-extra-debuginfo-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-optional-debuginfo-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc) * dtb-aarch64-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc ppc64le x86_64) * kernel-debug-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (ppc64le x86_64) * kernel-debug-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-debugsource-6.4.0-150600.23.143.1 * kernel-debug-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-devel-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (x86_64) * kernel-kvmsmall-vdso-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-vdso-6.4.0-150600.23.143.1 * kernel-debug-vdso-6.4.0-150600.23.143.1 * kernel-default-vdso-6.4.0-150600.23.143.1 * kernel-default-vdso-debuginfo-6.4.0-150600.23.143.1 * kernel-debug-vdso-debuginfo-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 ppc64le x86_64) * kernel-default-base-rebuild-6.4.0-150600.23.143.1.150600.12.66.3 * kernel-kvmsmall-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-debuginfo-6.4.0-150600.23.143.1 * kernel-kvmsmall-debugsource-6.4.0-150600.23.143.1 * kernel-kvmsmall-devel-6.4.0-150600.23.143.1 * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 * openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_143-default-debuginfo-1-150600.13.5.1 * kernel-livepatch-SLE15-SP6_Update_33-debugsource-1-150600.13.5.1 * kernel-default-livepatch-devel-6.4.0-150600.23.143.1 * kernel-livepatch-6_4_0-150600_23_143-default-1-150600.13.5.1 * openSUSE Leap 15.6 (noarch) * kernel-source-vanilla-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * kernel-devel-6.4.0-150600.23.143.1 * kernel-docs-html-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (aarch64 nosrc ppc64le x86_64) * kernel-kvmsmall-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.143.1 * openSUSE Leap 15.6 (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.143.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * reiserfs-kmp-default-6.4.0-150600.23.143.1 * kernel-obs-build-debugsource-6.4.0-150600.23.143.1 * ocfs2-kmp-default-6.4.0-150600.23.143.1 * reiserfs-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debugsource-6.4.0-150600.23.143.1 * kernel-obs-build-6.4.0-150600.23.143.1 * cluster-md-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-syms-6.4.0-150600.23.143.1 * dlm-kmp-default-6.4.0-150600.23.143.1 * cluster-md-kmp-default-6.4.0-150600.23.143.1 * kernel-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-6.4.0-150600.23.143.1 * ocfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * gfs2-kmp-default-debuginfo-6.4.0-150600.23.143.1 * dlm-kmp-default-debuginfo-6.4.0-150600.23.143.1 * kernel-default-devel-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc ppc64le s390x x86_64) * kernel-default-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * kernel-devel-6.4.0-150600.23.143.1 * kernel-macros-6.4.0-150600.23.143.1 * kernel-source-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch nosrc) * kernel-docs-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (nosrc s390x) * kernel-zfcpdump-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (s390x) * kernel-zfcpdump-debugsource-6.4.0-150600.23.143.1 * kernel-zfcpdump-debuginfo-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 nosrc) * kernel-64kb-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64) * kernel-64kb-devel-debuginfo-6.4.0-150600.23.143.1 * kernel-64kb-debuginfo-6.4.0-150600.23.143.1 * kernel-64kb-devel-6.4.0-150600.23.143.1 * kernel-64kb-debugsource-6.4.0-150600.23.143.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le x86_64) * kernel-default-base-6.4.0-150600.23.143.1.150600.12.66.3 ## References: * https://www.suse.com/security/cve/CVE-2025-71183.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1257631 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:30 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:47:30 -0000 Subject: SUSE-SU-2026:4933-1: important: Security update for the Linux Kernel Message-ID: <179329245094.14553.2907264866703675766@8cb11e3fd1c0> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4933-1 Release Date: 2026-10-29T09:17:03Z Rating: important References: * bsc#1277821 * bsc#1280387 * bsc#1281280 * bsc#1285684 Cross-References: * CVE-2026-74587 * CVE-2026-89542 * CVE-2026-90011 * CVE-2026-99999 CVSS scores: * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves four vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes). * ACPI: sysfs: Fix a buffer overrun problem with description_show() (git- fixes). * PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). * PCI: PM: Fix pci_power_up() (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4933 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4933 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (nosrc x86_64) * kernel-default-3.0.101-108.226.1 * kernel-xen-3.0.101-108.226.1 * kernel-ec2-3.0.101-108.226.1 * kernel-trace-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * kernel-trace-debuginfo-3.0.101-108.226.1 * kernel-default-debuginfo-3.0.101-108.226.1 * kernel-xen-debuginfo-3.0.101-108.226.1 * kernel-xen-devel-3.0.101-108.226.1 * kernel-syms-3.0.101-108.226.1 * kernel-xen-base-3.0.101-108.226.1 * kernel-xen-devel-debuginfo-3.0.101-108.226.1 * kernel-default-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-3.0.101-108.226.1 * kernel-trace-debugsource-3.0.101-108.226.1 * kernel-default-base-3.0.101-108.226.1 * kernel-ec2-base-3.0.101-108.226.1 * kernel-trace-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-debuginfo-3.0.101-108.226.1 * kernel-trace-devel-3.0.101-108.226.1 * kernel-ec2-debugsource-3.0.101-108.226.1 * kernel-trace-base-3.0.101-108.226.1 * kernel-default-devel-3.0.101-108.226.1 * kernel-default-debugsource-3.0.101-108.226.1 * kernel-source-3.0.101-108.226.1 * kernel-xen-debugsource-3.0.101-108.226.1 * kernel-ec2-debuginfo-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (noarch nosrc) * kernel-docs-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64) * kernel-default-3.0.101-108.226.1 * kernel-xen-3.0.101-108.226.1 * kernel-ec2-3.0.101-108.226.1 * kernel-trace-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * kernel-trace-debuginfo-3.0.101-108.226.1 * kernel-default-debuginfo-3.0.101-108.226.1 * kernel-xen-debuginfo-3.0.101-108.226.1 * kernel-xen-devel-3.0.101-108.226.1 * kernel-syms-3.0.101-108.226.1 * kernel-xen-base-3.0.101-108.226.1 * kernel-xen-devel-debuginfo-3.0.101-108.226.1 * kernel-default-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-3.0.101-108.226.1 * kernel-trace-debugsource-3.0.101-108.226.1 * kernel-default-base-3.0.101-108.226.1 * kernel-ec2-base-3.0.101-108.226.1 * kernel-trace-devel-debuginfo-3.0.101-108.226.1 * kernel-ec2-devel-debuginfo-3.0.101-108.226.1 * kernel-trace-devel-3.0.101-108.226.1 * kernel-ec2-debugsource-3.0.101-108.226.1 * kernel-trace-base-3.0.101-108.226.1 * kernel-default-devel-3.0.101-108.226.1 * kernel-default-debugsource-3.0.101-108.226.1 * kernel-source-3.0.101-108.226.1 * kernel-xen-debugsource-3.0.101-108.226.1 * kernel-ec2-debuginfo-3.0.101-108.226.1 * SUSE Linux Enterprise Server 11 SP4 (noarch nosrc) * kernel-docs-3.0.101-108.226.1 ## References: * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:48 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:47:48 -0000 Subject: SUSE-SU-2026:4932-1: critical: Security update for 389-ds Message-ID: <179329246849.14553.6257790190183723127@8cb11e3fd1c0> # Security update for 389-ds Announcement ID: SUSE-SU-2026:4932-1 Release Date: 2026-10-29T08:54:26Z Rating: critical References: * bsc#1273133 * bsc#1279572 * bsc#1279864 * bsc#1279865 * bsc#1279866 * bsc#1279867 * bsc#1284028 * bsc#1284034 Cross-References: * CVE-2026-11770 * CVE-2026-18355 * CVE-2026-18453 * CVE-2026-18922 * CVE-2026-19843 * CVE-2026-76560 * CVE-2026-86344 * CVE-2026-86345 CVSS scores: * CVE-2026-11770 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-11770 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18355 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18355 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18355 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18453 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18453 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18453 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18922 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18922 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-19843 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19843 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19843 ( NVD ): 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2026-76560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76560 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-76560 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-86344 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86344 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86345 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86345 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86345 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves eight vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). * CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864). * CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572). * CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865). * CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866). * CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867). * CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028). * CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034). Update to version 2.2.11~git12.1e612cde2: * Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS) * Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947) Update to version 2.2.11~git10.1f26fcebd: * Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913) * Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909) * Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849) * Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838) * Issue 6270 - heap-use-after-free with pwp dictionary path (#7791) * Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854) * iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826) * Migrate pwdchan to base64 0.23 Engine API * Update rust-dependencies Update to version 2.2.11~git1.98ee3aac7: * Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759) * Bump version to 2.2.11 * Security fix for CVE-2026-76560 * Security fix for CVE-2026-19843 * Security fix for CVE-2026-18922 * Security fix for CVE-2026-18453 * Security fix for CVE-2026-18355 * Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs * Fix expiration time check (#7718) * Issue 7774 - Add backport action (#7775) * Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771) * Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768) * CVE-2026-11770 - Fix StartReplicationRequest auth gate response format * Security fix for CVE-2026-11770 * Issue 3082 - Add test389.topologies compatibility shim for backports (#7725) * Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755) * Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730) * Issue 7723 - Range search returns an empty result when its start key is removed (#7724) * Issue 7735 - Heap overflow when parsing objectclass superior (#7736) * Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734) * Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4932 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4932 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4932 * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4932 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4932 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-snmp-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-snmp-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libsvrcore0-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150500.3.54.1 * lib389-2.2.11~git12.1e612cde2-150500.3.54.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150500.3.54.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150500.3.54.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11770.html * https://www.suse.com/security/cve/CVE-2026-18355.html * https://www.suse.com/security/cve/CVE-2026-18453.html * https://www.suse.com/security/cve/CVE-2026-18922.html * https://www.suse.com/security/cve/CVE-2026-19843.html * https://www.suse.com/security/cve/CVE-2026-76560.html * https://www.suse.com/security/cve/CVE-2026-86344.html * https://www.suse.com/security/cve/CVE-2026-86345.html * https://bugzilla.suse.com/show_bug.cgi?id=1273133 * https://bugzilla.suse.com/show_bug.cgi?id=1279572 * https://bugzilla.suse.com/show_bug.cgi?id=1279864 * https://bugzilla.suse.com/show_bug.cgi?id=1279865 * https://bugzilla.suse.com/show_bug.cgi?id=1279866 * https://bugzilla.suse.com/show_bug.cgi?id=1279867 * https://bugzilla.suse.com/show_bug.cgi?id=1284028 * https://bugzilla.suse.com/show_bug.cgi?id=1284034 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:47:55 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:47:55 -0000 Subject: SUSE-SU-2026:4931-1: important: Security update for rust-keylime Message-ID: <179329247571.14553.6841200776694228905@8cb11e3fd1c0> # Security update for rust-keylime Announcement ID: SUSE-SU-2026:4931-1 Release Date: 2026-10-29T08:53:50Z Rating: important References: * bsc#1287921 Cross-References: * CVE-2026-115905 * CVE-2026-115906 * CVE-2026-115907 * CVE-2026-115908 * CVE-2026-115909 CVSS scores: * CVE-2026-115905 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-115905 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115905 ( NVD ): 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-115906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-115906 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-115907 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115907 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115908 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115908 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.5 An update that solves five vulnerabilities can now be installed. ## Description: This update for rust-keylime fixes the following issue: * CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) * CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification (bsc#1287921) * CVE-2026-115907: zip: denial of service via unbounded memory allocation in legacy decoders (bsc#1287921) * CVE-2026-115908: zip: path traversal via lexical symlink validation during extraction (bsc#1287921) * CVE-2026-115909: zip: denial of service via uncontrolled memory allocation on symlink targets (bsc#1287921) Changes for rust-keylime: * Update to version 0.2.10+12: * log Agent UUID at push agent startup * Limit actix-web workers * Fix clippy needless_late_init warnings * Unwrap OCTET STRING wrapped EK certificates * build(deps): bump rand from 0.9.4 to 0.10.1 * build(deps): bump glob from 0.3.3 to 0.3.4 * build(deps): bump reqwest from 0.13.3 to 0.13.4 * Check shutdown marker inside ml_extend loop * Fix clippy useless_borrows_in_formatting warnings * build(deps): bump tokio from 1.52.2 to 1.53.1 * Fix payload key upgrade regression by falling back to mTLS key * Accept any RSA key size for payload encryption * Bump version to 0.2.10 * keylime: use runtime OpenSSL algorithm detection instead of compile-time symbols ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4931 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * rust-keylime-0.2.10+12-150500.3.22.1 * rust-keylime-debuginfo-0.2.10+12-150500.3.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-115905.html * https://www.suse.com/security/cve/CVE-2026-115906.html * https://www.suse.com/security/cve/CVE-2026-115907.html * https://www.suse.com/security/cve/CVE-2026-115908.html * https://www.suse.com/security/cve/CVE-2026-115909.html * https://bugzilla.suse.com/show_bug.cgi?id=1287921 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:48:04 -0000 Subject: SUSE-SU-2026:4930-1: important: Security update for rust-keylime Message-ID: <179329248401.14553.6928388918563513543@8cb11e3fd1c0> # Security update for rust-keylime Announcement ID: SUSE-SU-2026:4930-1 Release Date: 2026-10-29T08:53:35Z Rating: important References: * bsc#1287921 Cross-References: * CVE-2026-115905 * CVE-2026-115906 * CVE-2026-115907 * CVE-2026-115908 * CVE-2026-115909 CVSS scores: * CVE-2026-115905 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-115905 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115905 ( NVD ): 10.0 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-115906 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-115906 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-115907 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115907 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115908 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115908 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H * CVE-2026-115909 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-115909 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves five vulnerabilities can now be installed. ## Description: This update for rust-keylime fixes the following issue: * CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers (bsc#1287921) * CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification (bsc#1287921) * CVE-2026-115907: zip: denial of service via unbounded memory allocation in legacy decoders (bsc#1287921) * CVE-2026-115908: zip: path traversal via lexical symlink validation during extraction (bsc#1287921) * CVE-2026-115909: zip: denial of service via uncontrolled memory allocation on symlink targets (bsc#1287921) Changes for rust-keylime: * Update to version 0.2.10+12: * log Agent UUID at push agent startup * Limit actix-web workers * Fix clippy needless_late_init warnings * Unwrap OCTET STRING wrapped EK certificates * build(deps): bump rand from 0.9.4 to 0.10.1 * build(deps): bump glob from 0.3.3 to 0.3.4 * build(deps): bump reqwest from 0.13.3 to 0.13.4 * Check shutdown marker inside ml_extend loop * Fix clippy useless_borrows_in_formatting warnings * build(deps): bump tokio from 1.52.2 to 1.53.1 * Fix payload key upgrade regression by falling back to mTLS key * Accept any RSA key size for payload encryption * Bump version to 0.2.10 * keylime: use runtime OpenSSL algorithm detection instead of compile-time symbols ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4930 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4930 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * rust-keylime-debuginfo-0.2.10+12-150400.3.22.1 * rust-keylime-0.2.10+12-150400.3.22.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * rust-keylime-debuginfo-0.2.10+12-150400.3.22.1 * rust-keylime-0.2.10+12-150400.3.22.1 ## References: * https://www.suse.com/security/cve/CVE-2026-115905.html * https://www.suse.com/security/cve/CVE-2026-115906.html * https://www.suse.com/security/cve/CVE-2026-115907.html * https://www.suse.com/security/cve/CVE-2026-115908.html * https://www.suse.com/security/cve/CVE-2026-115909.html * https://bugzilla.suse.com/show_bug.cgi?id=1287921 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:48:19 -0000 Subject: SUSE-SU-2026:4929-1: critical: Security update for 389-ds Message-ID: <179329249992.14553.3968025050424006262@8cb11e3fd1c0> # Security update for 389-ds Announcement ID: SUSE-SU-2026:4929-1 Release Date: 2026-10-29T08:52:52Z Rating: critical References: * bsc#1273133 * bsc#1279572 * bsc#1279864 * bsc#1279865 * bsc#1279866 * bsc#1279867 * bsc#1284028 * bsc#1284034 Cross-References: * CVE-2026-11770 * CVE-2026-18355 * CVE-2026-18453 * CVE-2026-18922 * CVE-2026-19843 * CVE-2026-76560 * CVE-2026-86344 * CVE-2026-86345 CVSS scores: * CVE-2026-11770 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-11770 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-18355 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18355 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18355 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18453 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-18453 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-18453 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-18922 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-18922 ( SUSE ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-18922 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-19843 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-19843 ( SUSE ): 8.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-19843 ( NVD ): 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2026-76560 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76560 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N * CVE-2026-76560 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-86344 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86344 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86344 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86345 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-86345 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86345 ( NVD ): 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves eight vulnerabilities can now be installed. ## Description: This update for 389-ds fixes the following issues: * CVE-2026-11770: pre-auth LDAP filter injection in CleanAllRUV status check (bsc#1273133). * CVE-2026-18355: heap buffer overflow in the SASL I/O layer allows a remote authenticated attacker to cause a denial of service or potentially achieve remote code execution (bsc#1279864). * CVE-2026-18453: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search (bsc#1279572). * CVE-2026-18922: stale identity carried in a Cyrus SASL auxiliary property during SASL PLAIN authentication allows unauthenticated attackers to achieve privilege escalation to Directory Manager (bsc#1279865). * CVE-2026-19843: unescaped LDAP DN in Cockpit 389 Console LDAP editor allows an LDAP user with delegated privileges to execute shell commands with root privileges on the directory server host (bsc#1279866). * CVE-2026-76560: incorrect matching in the SELFDN ACI bind-rule evaluator allows an anonymous LDAP client to bypass access controls on directory entries containing empty SELFDN attributes (bsc#1279867). * CVE-2026-86344: incomplete LDAP messages sent in rapid succession can cause worker thread exhaustion (bsc#1284028). * CVE-2026-86345: smuggled plaintext commands sent alongside StartTLS requests can cause response forgery and authentication bypasses (bsc#1284034). Update to version 2.2.11~git12.1e612cde2: * Issue 7919 - CVE-2026-86344 - Fix worker pool exhaustion via partial LDAP messages (DoS) * Issue 7921 - Fix StartTLS plaintext buffer handling (#7922) (#7947) Update to version 2.2.11~git10.1f26fcebd: * Issue 7912 - dsidm role create-filtered ignores --nsrolefilter and forces an interactive prompt (#7913) * Issue 7908 - dsctl cockpit open-firewall --zone passes a malformed argument (#7909) * Issue 7848 - Reject incomplete MD5 and GOST-YESCRYPT hashes (#7849) * Issue 7837 - importing ldif with entry with long attribute name and subtype causes stack-buffer-overflow (#7838) * Issue 6270 - heap-use-after-free with pwp dictionary path (#7791) * Issue 7611 - PBKDF2 password verification should reject invalid iteration counts (#7632) (#7854) * iadvisories/GHSA-rgxx-hcc4-x3h4 / heap-buffer-overflow in rdn_av_swap (#7826) * Migrate pwdchan to base64 0.23 Engine API * Update rust-dependencies Update to version 2.2.11~git1.98ee3aac7: * Issue 7757 - stack-buffer-overflow caused by slapi_attr_init_syntax() (#7759) * Bump version to 2.2.11 * Security fix for CVE-2026-76560 * Security fix for CVE-2026-19843 * Security fix for CVE-2026-18922 * Security fix for CVE-2026-18453 * Security fix for CVE-2026-18355 * Issue 7595 - Remove the nightly dedup gate and fix dispatched test runs * Fix expiration time check (#7718) * Issue 7774 - Add backport action (#7775) * Issue 7770 - Testimony failure in test_cleanruv_extop_security.py (#7771) * Issue 1704 - Include stdbool.h in slapi headers on 2.4 (#7768) * CVE-2026-11770 - Fix StartReplicationRequest auth gate response format * Security fix for CVE-2026-11770 * Issue 3082 - Add test389.topologies compatibility shim for backports (#7725) * Issue 7595 - Skip redundant CI runs to relieve the Actions queue (#7755) * Issue 4701 - Fix UAF when excluding attrs from retro changelog (#7730) * Issue 7723 - Range search returns an empty result when its start key is removed (#7724) * Issue 7735 - Heap overflow when parsing objectclass superior (#7736) * Issue 7733 - Typo about nsuniqueid in tombstone_to_conflict (#7734) * Issue 7707 - lib389: set nsDS5ReplicaBindDNGroup before ensure_agreement() in join_supplier/hub/consumer (#7708) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4929 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4929 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4929 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-snmp-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-snmp-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * 389-ds-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-debuginfo-2.2.11~git12.1e612cde2-150600.8.38.1 * libsvrcore0-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-devel-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-2.2.11~git12.1e612cde2-150600.8.38.1 * 389-ds-debugsource-2.2.11~git12.1e612cde2-150600.8.38.1 * lib389-2.2.11~git12.1e612cde2-150600.8.38.1 ## References: * https://www.suse.com/security/cve/CVE-2026-11770.html * https://www.suse.com/security/cve/CVE-2026-18355.html * https://www.suse.com/security/cve/CVE-2026-18453.html * https://www.suse.com/security/cve/CVE-2026-18922.html * https://www.suse.com/security/cve/CVE-2026-19843.html * https://www.suse.com/security/cve/CVE-2026-76560.html * https://www.suse.com/security/cve/CVE-2026-86344.html * https://www.suse.com/security/cve/CVE-2026-86345.html * https://bugzilla.suse.com/show_bug.cgi?id=1273133 * https://bugzilla.suse.com/show_bug.cgi?id=1279572 * https://bugzilla.suse.com/show_bug.cgi?id=1279864 * https://bugzilla.suse.com/show_bug.cgi?id=1279865 * https://bugzilla.suse.com/show_bug.cgi?id=1279866 * https://bugzilla.suse.com/show_bug.cgi?id=1279867 * https://bugzilla.suse.com/show_bug.cgi?id=1284028 * https://bugzilla.suse.com/show_bug.cgi?id=1284034 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:48:32 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:48:32 -0000 Subject: SUSE-SU-2026:4928-1: important: Security update for MozillaFirefox Message-ID: <179329251219.14553.14052886819027674517@8cb11e3fd1c0> # Security update for MozillaFirefox Announcement ID: SUSE-SU-2026:4928-1 Release Date: 2026-10-29T08:52:28Z Rating: important References: * bsc#1286261 * bsc#1286385 * bsc#1286955 * bsc#1287809 Cross-References: * CVE-2026-100801 * CVE-2026-111497 * CVE-2026-113470 * CVE-2026-117860 * CVE-2026-117861 * CVE-2026-117862 * CVE-2026-117863 * CVE-2026-117864 * CVE-2026-117865 * CVE-2026-117866 * CVE-2026-117867 * CVE-2026-117868 * CVE-2026-117869 * CVE-2026-117870 * CVE-2026-117871 * CVE-2026-117872 * CVE-2026-117873 * CVE-2026-117874 * CVE-2026-117875 * CVE-2026-117876 * CVE-2026-117877 * CVE-2026-117878 * CVE-2026-117879 * CVE-2026-117880 * CVE-2026-117881 * CVE-2026-117882 * CVE-2026-117883 * CVE-2026-117884 * CVE-2026-117885 * CVE-2026-117886 * CVE-2026-117887 * CVE-2026-117888 * CVE-2026-117889 * CVE-2026-117890 * CVE-2026-117891 * CVE-2026-117892 * CVE-2026-117893 * CVE-2026-117894 * CVE-2026-117895 * CVE-2026-117896 * CVE-2026-117897 * CVE-2026-117898 * CVE-2026-117899 * CVE-2026-117900 * CVE-2026-117901 * CVE-2026-117902 * CVE-2026-117903 * CVE-2026-117904 * CVE-2026-117905 * CVE-2026-117906 * CVE-2026-117907 * CVE-2026-117908 * CVE-2026-117909 * CVE-2026-117910 * CVE-2026-117911 * CVE-2026-117912 * CVE-2026-117913 * CVE-2026-117914 * CVE-2026-117915 * CVE-2026-117916 * CVE-2026-117917 * CVE-2026-117918 * CVE-2026-117919 * CVE-2026-117920 * CVE-2026-117921 * CVE-2026-117922 * CVE-2026-117923 * CVE-2026-117924 * CVE-2026-117925 * CVE-2026-117926 * CVE-2026-117927 * CVE-2026-117928 * CVE-2026-117929 * CVE-2026-117930 * CVE-2026-117931 * CVE-2026-117932 * CVE-2026-117933 * CVE-2026-117934 * CVE-2026-117935 * CVE-2026-117936 * CVE-2026-117937 * CVE-2026-117938 * CVE-2026-117939 * CVE-2026-117940 * CVE-2026-117941 * CVE-2026-117942 * CVE-2026-117943 * CVE-2026-117944 * CVE-2026-117945 * CVE-2026-117946 * CVE-2026-117947 * CVE-2026-117948 * CVE-2026-117949 * CVE-2026-117950 * CVE-2026-117951 * CVE-2026-117952 * CVE-2026-117953 * CVE-2026-117954 * CVE-2026-117955 * CVE-2026-117956 * CVE-2026-117957 * CVE-2026-117958 * CVE-2026-117959 * CVE-2026-117960 * CVE-2026-117961 * CVE-2026-117962 * CVE-2026-117963 * CVE-2026-117964 * CVE-2026-117965 * CVE-2026-117966 * CVE-2026-117967 * CVE-2026-117968 * CVE-2026-117969 * CVE-2026-117970 * CVE-2026-117971 * CVE-2026-117972 * CVE-2026-117973 * CVE-2026-117974 * CVE-2026-117975 * CVE-2026-117976 * CVE-2026-117977 * CVE-2026-117978 * CVE-2026-117979 * CVE-2026-117980 * CVE-2026-117981 * CVE-2026-117982 * CVE-2026-117983 * CVE-2026-117984 * CVE-2026-117985 * CVE-2026-117986 * CVE-2026-117987 * CVE-2026-117988 * CVE-2026-117989 * CVE-2026-117990 * CVE-2026-117991 * CVE-2026-117992 * CVE-2026-117993 * CVE-2026-117994 * CVE-2026-117995 * CVE-2026-117996 * CVE-2026-117997 * CVE-2026-117998 * CVE-2026-117999 * CVE-2026-118000 * CVE-2026-118002 * CVE-2026-118003 * CVE-2026-118004 CVSS scores: * CVE-2026-100801 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-111497 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-111497 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-113470 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N * CVE-2026-113470 ( NVD ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 147 vulnerabilities can now be installed. ## Description: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 153.6.0 ESR (MFSA 2026-112, MFSA 2026-120, bsc#1286385): * CVE-2026-100801: Privilege escalation in the DLL Services component. * CVE-2026-113470: Cryptographic issue in the Security Block-lists, Allow- lists, and other State component (bsc#1286261). * CVE-2026-117860: Same-origin policy bypass in the DOM: Navigation component. * CVE-2026-117861: Sandbox escape in the DOM: Navigation component. * CVE-2026-117862: Privilege escalation due to incorrect boundary conditions in the Networking component. * CVE-2026-117863: Information disclosure due to uninitialized memory in the Audio/Video component. * CVE-2026-117864: Sandbox escape in the Form Manager component. * CVE-2026-117865: Use-after-free in the JavaScript: GC component. * CVE-2026-117866: Privilege escalation due to use-after-free in the Graphics: Canvas2D component. * CVE-2026-117867: Use-after-free in the Layout component. * CVE-2026-117868: Sandbox escape in the DOM: Networking component. * CVE-2026-117869: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117870: Use-after-free in the JavaScript Engine component. * CVE-2026-117871: Invalid pointer in the Graphics component. * CVE-2026-117872: Use-after-free in the JavaScript: Standard Library component. * CVE-2026-117873: Incorrect boundary conditions in the Audio/Video: Playback component. * CVE-2026-117874: Use-after-free in the Internationalization component. * CVE-2026-117875: Use-after-free in the Layout: Scrolling and Overflow component. * CVE-2026-117876: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117877: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117878: Other issue, use-after-free in the Storage: IndexedDB component. * CVE-2026-117879: Incorrect boundary conditions in the Layout: Tables component. * CVE-2026-117880: Use-after-free in the XML component. * CVE-2026-117881: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117882: Use-after-free in the Layout component. * CVE-2026-117883: Use-after-free in the DOM: HTML Parser component. * CVE-2026-117884: Use-after-free in the Networking component. * CVE-2026-117885: Use-after-free in the Layout: Grid component. * CVE-2026-117886: Incorrect boundary conditions in the Graphics: Text component. * CVE-2026-117887: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117888: Uninitialized memory in the Graphics: Canvas2D component. * CVE-2026-117889: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-117890: JIT miscompilation in the JavaScript Engine: JIT component. * CVE-2026-117891: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-117892: Privilege escalation due to use-after-free in the WebRTC: Networking component. * CVE-2026-117893: Incorrect boundary conditions in the Security: PSM component. * CVE-2026-117894: Incorrect boundary conditions in the WebRTC: Signaling component. * CVE-2026-117895: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117896: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117897: Incorrect boundary conditions in the Layout: Tables component. * CVE-2026-117898: Use-after-free in the JavaScript Engine: JIT component. * CVE-2026-117899: Use-after-free in the Networking: HTTP component. * CVE-2026-117900: Use-after-free in the DOM: Editor component. * CVE-2026-117901: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117902: Use-after-free in the Layout: Text and Fonts component. * CVE-2026-117903: Use-after-free in the Audio/Video component. * CVE-2026-117904: Use-after-free in the JavaScript: GC component. * CVE-2026-117905: Use-after-free in the Audio/Video: Playback component. * CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-117907: Use-after-free in the Networking component. * CVE-2026-117908: Use-after-free in the Graphics: ImageLib component. * CVE-2026-117909: Use-after-free in the JavaScript: GC component. * CVE-2026-117910: Invalid pointer in the JavaScript Engine component. * CVE-2026-117911: Use-after-free in the Audio/Video: Playback component. * CVE-2026-117912: Same-origin policy bypass in the CSS Parsing and Computation component. * CVE-2026-117913: Use-after-free in the SVG component. * CVE-2026-117914: Use-after-free in the SVG component. * CVE-2026-117915: Incorrect boundary conditions in the Layout: Block and Inline component. * CVE-2026-117916: Use-after-free in the XSLT component. * CVE-2026-117917: Invalid pointer in the Graphics: WebRender component. * CVE-2026-117918: Use-after-free in the Graphics: Canvas2D component. * CVE-2026-117919: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117920: Use-after-free in the DOM: HTML Parser component. * CVE-2026-117921: Use-after-free in the CSS Parsing and Computation component. * CVE-2026-117922: Use-after-free in the Networking: WebSockets component. * CVE-2026-117923: Use-after-free in the Audio/Video component. * CVE-2026-117924: Use-after-free in the XSLT component. * CVE-2026-117925: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117926: Incorrect boundary conditions in the SVG component. * CVE-2026-117927: Use-after-free in the SVG component. * CVE-2026-117928: Same-origin policy bypass in the CSS Parsing and Computation component. * CVE-2026-117929: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117930: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-117931: Use-after-free in the DOM: Events component. * CVE-2026-117932: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117933: Frame poisoning in the CSS Parsing and Computation component. * CVE-2026-117934: Use-after-free in the Layout component. * CVE-2026-117935: Use-after-free in the DOM: Bindings (WebIDL) component. * CVE-2026-117936: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117937: Invalid pointer in the JavaScript Engine component. * CVE-2026-117938: Use-after-free in the Layout component. * CVE-2026-117939: Use-after-free in the XML component. * CVE-2026-117940: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117941: Use-after-free in the DOM: CSS Object Model component. * CVE-2026-117942: Incorrect boundary conditions in the JavaScript Engine: JIT component. * CVE-2026-117943: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117944: Use-after-free in the Layout component. * CVE-2026-117945: Incorrect boundary conditions in the XML component. * CVE-2026-117946: Incorrect boundary conditions in the JavaScript Engine component. * CVE-2026-117947: Use-after-free in the XML component. * CVE-2026-117948: Use-after-free in the SVG component. * CVE-2026-117949: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117950: Incorrect boundary conditions in the DOM: Core & HTML component. * CVE-2026-117951: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117952: Uninitialized memory in the Networking component. * CVE-2026-117953: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117954: Use-after-free in the Layout: Positioned component. * CVE-2026-117955: JIT miscompilation in the JavaScript: WebAssembly component. * CVE-2026-117956: Invalid pointer in the Nimbus Desktop Client component. * CVE-2026-117957: Cryptographic issue in the WebRTC: Networking component. * CVE-2026-117958: Site isolation issue in the Networking: HTTP component. * CVE-2026-117959: Site isolation issue in the DOM: Service Workers component. * CVE-2026-117960: Spoofing issue in the DOM: Core & HTML component. * CVE-2026-117961: Incorrect boundary conditions in the Layout: Text and Fonts component. * CVE-2026-117962: Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. * CVE-2026-117963: Incorrect boundary conditions in the DOM: Service Workers component. * CVE-2026-117964: Use-after-free in the Panning and Zooming component. * CVE-2026-117965: Same-origin policy bypass in the Address Bar component. * CVE-2026-117966: Site isolation issue in the Networking: HTTP component. * CVE-2026-117967: Mitigation bypass in the DOM: Security component. * CVE-2026-117968: Use-after-free in the DOM: Core & HTML component. * CVE-2026-117969: Invalid pointer in the JavaScript Engine: JIT component. * CVE-2026-117970: Race condition in the Disability Access APIs component. * CVE-2026-117971: Sandbox escape due to use-after-free in the Print Preview component. * CVE-2026-117972: Use-after-free in the Graphics component. * CVE-2026-117973: Use-after-free in the Networking: DNS component. * CVE-2026-117974: Use-after-free in the XML component. * CVE-2026-117975: Sandbox escape due to invalid pointer in the Graphics: WebRender component. * CVE-2026-117976: Site isolation issue in the DOM: Navigation component. * CVE-2026-117977: Other issue in the Console component. * CVE-2026-117978: Incorrect boundary conditions in the Graphics component. * CVE-2026-117979: Incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-117980: Use-after-free in the Graphics component. * CVE-2026-117981: Privilege escalation in the Toolkit component. * CVE-2026-117982: Invalid pointer in the JavaScript Engine: JIT component. * CVE-2026-117983: Use-after-free in the Graphics component. * CVE-2026-117984: Incorrect boundary conditions in the Layout: Scrolling and Overflow component. * CVE-2026-117985: Sandbox escape due to use-after-free in the Graphics component. * CVE-2026-117986: Use-after-free in the Graphics component. * CVE-2026-117987: Use-after-free in the Graphics component. * CVE-2026-117988: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. * CVE-2026-117989: Use-after-free in the Graphics component. * CVE-2026-117990: Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. * CVE-2026-117991: Incorrect boundary conditions in the Layout: Text and Fonts component. * CVE-2026-117992: Information disclosure in the CSS Parsing and Computation component. * CVE-2026-117993: Integer overflow in the Graphics: Text component. * CVE-2026-117994: Use-after-free in the JavaScript: GC component. * CVE-2026-117995: Privilege escalation in the DOM: UI Events & Focus Handling component. * CVE-2026-117996: Incorrect boundary conditions in the WebRTC component. * CVE-2026-117997: Sandbox escape due to use-after-free in the Widget component. * CVE-2026-117998: Mitigation bypass in the DOM: Push Subscriptions component. * CVE-2026-117999: Race condition in the IPC component. * CVE-2026-118000: Information disclosure in the Networking: HTTP component. * CVE-2026-118002: Information disclosure due to race condition in the Networking component. * CVE-2026-118003: Information disclosure in the Networking: DNS component. * CVE-2026-118004: Incorrect boundary conditions in the CSS Transitions and Animations component. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4928 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4928 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * MozillaFirefox-debuginfo-153.6.0-118.19.2 * MozillaFirefox-translations-common-153.6.0-118.19.2 * MozillaFirefox-153.6.0-118.19.2 * MozillaFirefox-debugsource-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * MozillaFirefox-devel-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * MozillaFirefox-debuginfo-153.6.0-118.19.2 * MozillaFirefox-translations-common-153.6.0-118.19.2 * MozillaFirefox-153.6.0-118.19.2 * MozillaFirefox-debugsource-153.6.0-118.19.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * MozillaFirefox-devel-153.6.0-118.19.2 ## References: * https://www.suse.com/security/cve/CVE-2026-100801.html * https://www.suse.com/security/cve/CVE-2026-111497.html * https://www.suse.com/security/cve/CVE-2026-113470.html * https://www.suse.com/security/cve/CVE-2026-117860.html * https://www.suse.com/security/cve/CVE-2026-117861.html * https://www.suse.com/security/cve/CVE-2026-117862.html * https://www.suse.com/security/cve/CVE-2026-117863.html * https://www.suse.com/security/cve/CVE-2026-117864.html * https://www.suse.com/security/cve/CVE-2026-117865.html * https://www.suse.com/security/cve/CVE-2026-117866.html * https://www.suse.com/security/cve/CVE-2026-117867.html * https://www.suse.com/security/cve/CVE-2026-117868.html * https://www.suse.com/security/cve/CVE-2026-117869.html * https://www.suse.com/security/cve/CVE-2026-117870.html * https://www.suse.com/security/cve/CVE-2026-117871.html * https://www.suse.com/security/cve/CVE-2026-117872.html * https://www.suse.com/security/cve/CVE-2026-117873.html * https://www.suse.com/security/cve/CVE-2026-117874.html * https://www.suse.com/security/cve/CVE-2026-117875.html * https://www.suse.com/security/cve/CVE-2026-117876.html * https://www.suse.com/security/cve/CVE-2026-117877.html * https://www.suse.com/security/cve/CVE-2026-117878.html * https://www.suse.com/security/cve/CVE-2026-117879.html * https://www.suse.com/security/cve/CVE-2026-117880.html * https://www.suse.com/security/cve/CVE-2026-117881.html * https://www.suse.com/security/cve/CVE-2026-117882.html * https://www.suse.com/security/cve/CVE-2026-117883.html * https://www.suse.com/security/cve/CVE-2026-117884.html * https://www.suse.com/security/cve/CVE-2026-117885.html * https://www.suse.com/security/cve/CVE-2026-117886.html * https://www.suse.com/security/cve/CVE-2026-117887.html * https://www.suse.com/security/cve/CVE-2026-117888.html * https://www.suse.com/security/cve/CVE-2026-117889.html * https://www.suse.com/security/cve/CVE-2026-117890.html * https://www.suse.com/security/cve/CVE-2026-117891.html * https://www.suse.com/security/cve/CVE-2026-117892.html * https://www.suse.com/security/cve/CVE-2026-117893.html * https://www.suse.com/security/cve/CVE-2026-117894.html * https://www.suse.com/security/cve/CVE-2026-117895.html * https://www.suse.com/security/cve/CVE-2026-117896.html * https://www.suse.com/security/cve/CVE-2026-117897.html * https://www.suse.com/security/cve/CVE-2026-117898.html * https://www.suse.com/security/cve/CVE-2026-117899.html * https://www.suse.com/security/cve/CVE-2026-117900.html * https://www.suse.com/security/cve/CVE-2026-117901.html * https://www.suse.com/security/cve/CVE-2026-117902.html * https://www.suse.com/security/cve/CVE-2026-117903.html * https://www.suse.com/security/cve/CVE-2026-117904.html * https://www.suse.com/security/cve/CVE-2026-117905.html * https://www.suse.com/security/cve/CVE-2026-117906.html * https://www.suse.com/security/cve/CVE-2026-117907.html * https://www.suse.com/security/cve/CVE-2026-117908.html * https://www.suse.com/security/cve/CVE-2026-117909.html * https://www.suse.com/security/cve/CVE-2026-117910.html * https://www.suse.com/security/cve/CVE-2026-117911.html * https://www.suse.com/security/cve/CVE-2026-117912.html * https://www.suse.com/security/cve/CVE-2026-117913.html * https://www.suse.com/security/cve/CVE-2026-117914.html * https://www.suse.com/security/cve/CVE-2026-117915.html * https://www.suse.com/security/cve/CVE-2026-117916.html * https://www.suse.com/security/cve/CVE-2026-117917.html * https://www.suse.com/security/cve/CVE-2026-117918.html * https://www.suse.com/security/cve/CVE-2026-117919.html * https://www.suse.com/security/cve/CVE-2026-117920.html * https://www.suse.com/security/cve/CVE-2026-117921.html * https://www.suse.com/security/cve/CVE-2026-117922.html * https://www.suse.com/security/cve/CVE-2026-117923.html * https://www.suse.com/security/cve/CVE-2026-117924.html * https://www.suse.com/security/cve/CVE-2026-117925.html * https://www.suse.com/security/cve/CVE-2026-117926.html * https://www.suse.com/security/cve/CVE-2026-117927.html * https://www.suse.com/security/cve/CVE-2026-117928.html * https://www.suse.com/security/cve/CVE-2026-117929.html * https://www.suse.com/security/cve/CVE-2026-117930.html * https://www.suse.com/security/cve/CVE-2026-117931.html * https://www.suse.com/security/cve/CVE-2026-117932.html * https://www.suse.com/security/cve/CVE-2026-117933.html * https://www.suse.com/security/cve/CVE-2026-117934.html * https://www.suse.com/security/cve/CVE-2026-117935.html * https://www.suse.com/security/cve/CVE-2026-117936.html * https://www.suse.com/security/cve/CVE-2026-117937.html * https://www.suse.com/security/cve/CVE-2026-117938.html * https://www.suse.com/security/cve/CVE-2026-117939.html * https://www.suse.com/security/cve/CVE-2026-117940.html * https://www.suse.com/security/cve/CVE-2026-117941.html * https://www.suse.com/security/cve/CVE-2026-117942.html * https://www.suse.com/security/cve/CVE-2026-117943.html * https://www.suse.com/security/cve/CVE-2026-117944.html * https://www.suse.com/security/cve/CVE-2026-117945.html * https://www.suse.com/security/cve/CVE-2026-117946.html * https://www.suse.com/security/cve/CVE-2026-117947.html * https://www.suse.com/security/cve/CVE-2026-117948.html * https://www.suse.com/security/cve/CVE-2026-117949.html * https://www.suse.com/security/cve/CVE-2026-117950.html * https://www.suse.com/security/cve/CVE-2026-117951.html * https://www.suse.com/security/cve/CVE-2026-117952.html * https://www.suse.com/security/cve/CVE-2026-117953.html * https://www.suse.com/security/cve/CVE-2026-117954.html * https://www.suse.com/security/cve/CVE-2026-117955.html * https://www.suse.com/security/cve/CVE-2026-117956.html * https://www.suse.com/security/cve/CVE-2026-117957.html * https://www.suse.com/security/cve/CVE-2026-117958.html * https://www.suse.com/security/cve/CVE-2026-117959.html * https://www.suse.com/security/cve/CVE-2026-117960.html * https://www.suse.com/security/cve/CVE-2026-117961.html * https://www.suse.com/security/cve/CVE-2026-117962.html * https://www.suse.com/security/cve/CVE-2026-117963.html * https://www.suse.com/security/cve/CVE-2026-117964.html * https://www.suse.com/security/cve/CVE-2026-117965.html * https://www.suse.com/security/cve/CVE-2026-117966.html * https://www.suse.com/security/cve/CVE-2026-117967.html * https://www.suse.com/security/cve/CVE-2026-117968.html * https://www.suse.com/security/cve/CVE-2026-117969.html * https://www.suse.com/security/cve/CVE-2026-117970.html * https://www.suse.com/security/cve/CVE-2026-117971.html * https://www.suse.com/security/cve/CVE-2026-117972.html * https://www.suse.com/security/cve/CVE-2026-117973.html * https://www.suse.com/security/cve/CVE-2026-117974.html * https://www.suse.com/security/cve/CVE-2026-117975.html * https://www.suse.com/security/cve/CVE-2026-117976.html * https://www.suse.com/security/cve/CVE-2026-117977.html * https://www.suse.com/security/cve/CVE-2026-117978.html * https://www.suse.com/security/cve/CVE-2026-117979.html * https://www.suse.com/security/cve/CVE-2026-117980.html * https://www.suse.com/security/cve/CVE-2026-117981.html * https://www.suse.com/security/cve/CVE-2026-117982.html * https://www.suse.com/security/cve/CVE-2026-117983.html * https://www.suse.com/security/cve/CVE-2026-117984.html * https://www.suse.com/security/cve/CVE-2026-117985.html * https://www.suse.com/security/cve/CVE-2026-117986.html * https://www.suse.com/security/cve/CVE-2026-117987.html * https://www.suse.com/security/cve/CVE-2026-117988.html * https://www.suse.com/security/cve/CVE-2026-117989.html * https://www.suse.com/security/cve/CVE-2026-117990.html * https://www.suse.com/security/cve/CVE-2026-117991.html * https://www.suse.com/security/cve/CVE-2026-117992.html * https://www.suse.com/security/cve/CVE-2026-117993.html * https://www.suse.com/security/cve/CVE-2026-117994.html * https://www.suse.com/security/cve/CVE-2026-117995.html * https://www.suse.com/security/cve/CVE-2026-117996.html * https://www.suse.com/security/cve/CVE-2026-117997.html * https://www.suse.com/security/cve/CVE-2026-117998.html * https://www.suse.com/security/cve/CVE-2026-117999.html * https://www.suse.com/security/cve/CVE-2026-118000.html * https://www.suse.com/security/cve/CVE-2026-118002.html * https://www.suse.com/security/cve/CVE-2026-118003.html * https://www.suse.com/security/cve/CVE-2026-118004.html * https://bugzilla.suse.com/show_bug.cgi?id=1286261 * https://bugzilla.suse.com/show_bug.cgi?id=1286385 * https://bugzilla.suse.com/show_bug.cgi?id=1286955 * https://bugzilla.suse.com/show_bug.cgi?id=1287809 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 16:49:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 16:49:11 -0000 Subject: SUSE-SU-2026:4927-1: critical: Security update for libapr1, libtcnative-1-0, tomcat Message-ID: <179329255149.14553.9337318642366732589@8cb11e3fd1c0> # Security update for libapr1, libtcnative-1-0, tomcat Announcement ID: SUSE-SU-2026:4927-1 Release Date: 2026-10-29T08:51:54Z Rating: critical References: * bsc#1130843 * bsc#1151059 * bsc#1199170 * bsc#1260322 * bsc#1282581 * bsc#1282599 * bsc#1282620 * bsc#1282621 * bsc#1282622 * bsc#1282623 * bsc#1282624 * bsc#1282625 * bsc#1282626 * bsc#1282627 * bsc#1282628 * bsc#1282629 * bsc#1282630 * bsc#1282631 * bsc#1282787 * bsc#1286361 * bsc#1286362 * bsc#1286502 * bsc#1286555 * bsc#1286559 * bsc#1286571 * bsc#1286902 Cross-References: * CVE-2017-12613 * CVE-2023-49582 * CVE-2026-101296 * CVE-2026-101356 * CVE-2026-41293 * CVE-2026-73581 * CVE-2026-74048 * CVE-2026-74049 * CVE-2026-75973 * CVE-2026-76183 * CVE-2026-77756 * CVE-2026-77762 * CVE-2026-77791 * CVE-2026-78383 * CVE-2026-78437 * CVE-2026-79677 * CVE-2026-80353 * CVE-2026-86243 * CVE-2026-86246 * CVE-2026-86247 * CVE-2026-86248 * CVE-2026-86350 * CVE-2026-87022 * CVE-2026-88041 * CVE-2026-93446 CVSS scores: * CVE-2017-12613 ( SUSE ): 3.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L * CVE-2017-12613 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2017-12613 ( NVD ): 7.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2023-49582 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2023-49582 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49582 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-49582 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-101296 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-101296 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-101296 ( NVD ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-101356 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-101356 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-101356 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-41293 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-41293 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-41293 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-73581 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-73581 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-73581 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-74048 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-74048 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-74049 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-74049 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-75973 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-75973 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-75973 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-76183 ( SUSE ): 9.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-76183 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-76183 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77756 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-77756 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77756 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-77762 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-77762 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-77762 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-77791 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77791 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-77791 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-78383 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78383 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-78437 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-78437 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-78437 ( NVD ): 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2026-79677 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79677 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79677 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80353 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-80353 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86243 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-86243 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86243 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-86246 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-86246 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N * CVE-2026-86246 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86247 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86247 ( NVD ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-86248 ( SUSE ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-86248 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-86350 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-86350 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-86350 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-87022 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-87022 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-87022 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-88041 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-88041 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-93446 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-93446 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves 25 vulnerabilities and has one security fix can now be installed. ## Description: This update for libapr1, libtcnative-1-0, tomcat fixes the following issues: * CVE-2026-73581: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore (bsc#1282631). * CVE-2026-74048: Cryptographic policy bypass via FIPS activation failure (bsc#1286502). * CVE-2026-74049: Jasper JSTL plug-in implementation omits page abort (bsc#1286555). * CVE-2026-75973: improper authentication when Jakarta authentication is configured with `SimpleAuthConfigProvider` (bsc#1282630). * CVE-2026-76183: security constraints for any WebSocket endpoint can be bypassed (bsc#1282629). * CVE-2026-77756: inconsistent interpretation of HTTP requests allows an attacker to cause one request from another user to fail when Tomcat is located behind a reverse proxy (bsc#1282628). * CVE-2026-77762: stale HPACK emitter injects trailers fields into another HTTP/2 request (bsc#1282599). * CVE-2026-77791: uncontrolled resource consumption when sending WebSocket close message enabled a DoS attack (bsc#1282627). * CVE-2026-78383: allocation of resources without limits or throttling allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service (bsc#1282626). * CVE-2026-78437: incomplete cleanup allows a malformed request to potentially cause requests from another user to fail (bsc#1282625). * CVE-2026-79677: missing release of resource after effective lifetime and comparison using wrong factors allows for denial of service due to lost time outs for asynchronous WebSocket writes (bsc#1282624). * CVE-2026-80353: TOCTOU when creating unix domain sockets for the APR/Native connector allows an unauthorized local user to access the unix domain socket (bsc#1286902). * CVE-2026-86243: buffer overread during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash (bsc#1282623). * CVE-2026-86246: insecure ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX options enabled by default (bsc#1282622). * CVE-2026-86247: race condition allows client certificate verification requirements to be down-graded for some configurations (bsc#1282621). * CVE-2026-86248: CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled (bsc#1282620). * CVE-2026-86350: HTTP/2 requests can cause request header mix-ups and HTTP request smuggling (bsc#1282787). * CVE-2026-87022: WebSocket message smuggling when per-message-deflate is used (bsc#1282581). * CVE-2026-88041: Information disclosure via incomplete HTTP trailer cleanup (bsc#1286559). * CVE-2026-93446: Possible TLS 1.3 connection failures (bsc#1286571). * CVE-2026-101296: Authentication bypass via non-GSSAPI SASL in JNDI realm (bsc#1286361). * CVE-2026-101356: Information disclosure via incorrect object recycling in HTTP/2 processing (bsc#1286362). Non security issue fixed: * Tomcat TLS Broken - Tomcat 9.0.14 update incompatible with tomcat-native (bsc#1130843). Changes for libapr1: Update to 1.6.5: * Fix Win32 build breakage in apr_os_exp_time_put() in 1.6.4 * Fix apr_parse_addr_port() regression in scope_id parsing introduced in 1.6.3 * Numerous corrections to APR poll behavior * apr_file_trunc: Truncating a buffered file could add unexpected data after the truncate position * apr_file_trunc: Fix an issue where reading from a buffered file after truncate could return stale data from the buffer * apr_ipsubnet_create() now fails for an empty input string * Fix CVE-2017-12613, out-of-bounds read in apr_time_exp*() * Export build files find_apr.m4 and apr_common.m4 * apr_proc_mutex-pthread: Refcount shared mutexes usage to avoid destruction while still in use by some process(es) * New APIs: apr_allocator_align(), apr_os_proc_mutex_put_ex(), apr_os_proc_mutex_get_ex(), apr_os_proc_mutex_set_ex(), apr_file_pipe_create_pools(), apr_pollcb_wakeup(), apr_pollcb_method_name(), apr_cstr__(), apr_skiplist_addne_(), apr_skiplist_size(), apr_skiplist_height(), apr_skiplist_preheight(), apr_skiplist_set_preheight(), apr_skiplist_add(), apr_sockaddr_info_copy(), apr_shm_delete(), apr_escape_ldap() and apr_pescape_ldap() * Add APR_OVERLAP_TABLES_ADD, APR_SO_FREEBIND and the APR_PERMS_SET macros * Add Unix domain socket support * New configure options --enable-allocator-guard-pages and \--enable-pool- concurrency-check Changes for libtcnative-1-0: * Update to 1.3.9 * Security fixes * Client certificate requirements can be down-graded (bsc#1282621, CVE-2026-86247) A race condition allowed client certificate verification requirements to be down-graded for some configurations. * Insecure OpenSSL options enabled (bsc#1282622, CVE-2026-86246) Apache Tomcat Native enabled insecure options by default including ALLOW_CLIENT_RENEGOTIATION, NO_EXTENDED_MASTER_SECRET, IGNORE_UNEXPECTED_EOF and ALLOW_NO_DHE_KEX. * DoS via TLS handshake (bsc#1282623, CVE-2026-86243) A buffer over-read vulnerability in Apache Tomcat Native during the TLS handshaking permits a malicious user to trigger a DoS via a JVM crash. * Changes * Code: Remove call to ERR_remove_thread_state() from Windows specific code to allow building with OpenSSL 4.0.x. ERR_remove_thread_state() is a no-op in OpenSSL 1.1+ and got removed in OpenSSL 4 * Fix: Fix a potential crash when negotiating ALPN * If ALPN negotiation fails and failure is configured to use the last server protocol in the list, use it rather than the last protocol offered by the client * Fix: Add support for the extended range of options available from OpenSSL 3.0.x. The options flag is now a 64-bit unsigned int (represented by a Java long) rather than a 32-bit unsigned int (represented by a Java int) * Code: Remove unused code * Ensure that per connection changes to certificate verification settings, e.g. to support client certificate authentication, do not modify the certificate verification settings for other connections * Fix: Fix a potential crash when configuring raw certificates * Fix: Avoid a potential crash with very long ALPN protocol names * Fix: Make the call to a CertificateVerifier more robust * Fix: Avoid a potential crash when processing OCSP URLs * Fix: Make the processing of OCSP responses more robust * Fix: Stricter OCSP handling when soft-fail is disabled * Fix: Harden against the mis-use of Buffer.address(ByteBuffer) * Fix: Harden against the mis-use of Pool.destroy(long) * Code: The minimum supported OpenSSL version is now 3.0.x. OpenSSL 1.1.1 support was accidentally broken in 1.3.8. As no bug reports were receive for that failure and since both Debian and Ubuntu versions that used OpenSSL 1.1.1 have reached end of support, OpenSSL 1.1.1 is no longer supported * Update: OpenSSL 3.0.x is approaching end of support so the recommended version of OpenSSL (and the version that windows binaries will be built with) now follows the 3.5.x LTS branch * Fix: Switch to automatic configuration of DH parameters. Manual configuration attempts will be ignored * Code: Make setTmpECDHByCurveName() a NO-OP * Fix: Refactor extraction of ECDH curve name from the Certificate to avoid deprecated OpenSSL methods * Fix: Refactor the native implementation of SSL.getTime() to avoid the Y2038 problem in SSL_SESSION_get_time() when running on a verion of OpenSSL that includes the new SSL_SESSION_get_time_ex() method * restore openssl 1.1.1 support * Update to 1.3.8 * Fix a memory leak when parsing certificates * Fix two potential memory leaks on error paths identified by Copilot * Fix post handshake authentication when Tomcat is configured with a trust store using JSSE style configuration * Correct expected size of tickets when calling SSLContext.setSessionTicketKeys * Update to 1.3.7: [bsc#1260322] 1.3.7 * Code: Refactor access to ASN1_OCTET_STRING to use setters to fix errors when building against the latest OpenSSL 4.0.x code. (markt) * Fix: Fix the handling of OCSP requests with multiple responder URIs. (jfclere) * Fix: Fix the handling of TRY_AGAIN responses to OCSP requests when soft fail is disabled. (jfclere) 1.3.6 * Code: Refactor the SSL_CONF_CTX clean-up to align it with SSL and SSL_CTX clean-up. (markt) * Fix: Fix unnecessarily large buffer allocation when filtering out NULL and export ciphers. Pull requests #35 and #37 provided by chenjp. (markt) * Fix: Fix a potential memory leak if an invalid OpenSSLConf is provided. Pull request #36 provided by chenjp. (markt) * Fix: Refactor setting of OCSP configuration defaults as they were only applied if the SSL_CONF_CTX was used. While one was always used with Tomcat versions aware of the OCSP configuration options, one was not always used with Tomcat versions unaware of the OCSP configuration options leading to OCSP verification being enabled by default when the expected behaviour was disabled by default. (markt) * Code: Improve performance for the rare case of handling large OCSP responses. (markt) 1.3.5 * Fix: Remove group write permissions from the files in the tar.gz source archive. (markt) * Fix: Clear an additional error in OCSP processing that was preventing OCSP soft fail working with Tomcat's APR/native connector. (markt) 1.3.4 * Fix: Correct logic error that prevented the configuration of TLS 1.3 cipher suites. (markt) 1.3.3 * Fix: Refactor the addition of TLS 1.3 cipher suite configuration to avoid a regression when running a version of Tomcat that pre-dates this change. (markt) 1.3.2 * Update: Rename configure.in to modern autotools style configure.ac. (rjung) * Update: Fix incomplete updates for autotools generated files during "buildconf" execution. (rjung) * Update: Improve quoting in tcnative.m4. (rjung) * Update: Update the minimum version of autoconf for releasing to 2.68. * Fix: Fix the autoconf warnings when creating a release. (markt) * Update: The Windows binaries are now built with OCSP support enabled by default. (markt) * Add: Include a nonce with OCSP requests and check the nonce, if any, in the OCSP response. (markt) * Add: Expand verification of OCSP responses. (markt) * Add: Add the ability to configure the OCSP checks to soft-fail - i.e. if the responder cannot be contacted or fails to respond in a timely manner the OCSP check will not fail. (markt) * Add: Add a configurable timeout to the writing of OCSP requests and reading of OCSP responses. (markt) * Add: Add the ability to control the OCSP verification flags. (markt) * Add: Configure TLS 1.3 connections from the provided ciphers list as well as connections using TLS 1.2 and earlier. Pull request provided by gastush. (markt) * Update: Update the Windows build environment to use Visual Studio * (markt) 1.3.1 * Fix: Fix a crash on Windows when SSLContext.setCACertificate() is invoked with a null value for caCertificateFile and a non-null value for caCertificatePath until properly addressed with https://github.com/openssl/openssl/issues/24416. (michaelo) * Add: Use ERR_error_string_n with a definite buffer length as a named constant. (schultz) * Add: Ensure local reference capacity is available when creating new arrays and Strings. (schultz) * Update: Update the recommended minimum version of OpenSSL to 3.0.14. 1.3.0 * Update: Drop useless compile.optimize option. (michaelo) * Update: Align Java source compile configuration with Tomcat. (michaelo) * Fix: Fix version set in DLL header on Windows. (michaelo) * Update: Remove an unreachable if condition around CRLs in sslcontext.c. (michaelo) * Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(), the default verify paths are no longer set. Only the explicitly configured trust store, if any, will be used. (michaelo) * Update: Update the minimum supported version of LibreSSL to 3.5.2. * Design: Remove NPN support as NPN was never standardised and browser support was removed in 2019. (markt) * Update: Update the recommended minimum version of OpenSSL to 3.0.13. * Fix build after removal of the default %%{java_home} define * Update to 1.2.39: * Fix: 67061: If the insecure optionalNoCA certificate verification mode is used, disable OCSP if enabled else client certificates from unknown certificate authorities will be rejected. * Update: Update the recommended minimum version of OpenSSL to 3.0.11. * Change the hardcoded libopenssl-1_1-devel to libopenssl-devel for distributions that have the right version * Version update to version 1.2.38: * Align default pass phrase prompt with HTTPd. * # 66669: Fix memory leak in SNI processing. * Update the recommended minimum version of OpenSSL to 1.1.1v. * Update the recommended minimum version of APR to 1.7.4. * Document the TLS rengotiation behaviour. * Add HOWTO-RELEASE.txt that describes the release process. * Refactor library initialization so it is compatible with Tomcat 10.1.x onwards where a number of Java classes have been removed. * Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to allow clients to determine if the FIPS provider is being used when Tomcat Native is compiled against OpenSSL 3.x. * # 66035: Fix crash when attempting to read TLS session ID after a handshake failure. * Enable download_deps.sh to be called from any directory. * Fix release script so it works with the current git layout. * # 65441: Correct previous fix that enabled building to continue with OpenSSL 3.x. * # 65659: Remove remaining reference to pkg-config which is no longer included in the Tomcat Native distribution. * # 65181: Additional changes required to provided support for using OpenSSL Engines that use proprietary key formats. * # 65329: Correct handling of WINVER in make file to use correct constant for Windows 7. Add constants for Windows 8, Windows 8.1 and Windows 10. Rename WINNT to WIN2k as it is used for Windows 2000 upwards, not Windows NT upwards. * Add a patch for APR that fixes an issue where some Windows systems in some configurations would only listen on IPv6 addresses on dual stack systems even though configured to listen on both IPv6 and IPv4 addresses. * Correct a regression in the fix for 65181 that prevented an error message from being displayed if an invalid key file was provided and no OpenSSL Engine was configured. * # 65181: Improve support for using OpenSSL Engines that use proprietary key formats. * Enable building to continue against OpenSSL 3.x and 1.1.1. * Incomplete name mangling fix for C++ compilers in tcn_api.h. * Improve OS-specific header include for native thread id. * Disable keylog callback support for LibreSSL. * Add support for SSLContext.addChainCertificateRaw() with LibreSSL 2.9.1 and up. * Add support for HP-UX's _lwp_self() in our ssl_thread_id(void). * Remove default option passed for rpath to linker on HP-UX. * Add an option to allow the OCSP responder check to be bypassed. Note that if OCSP is enabled, a missing responder is now treated as an error. * # 64429: Fix compilation with LibreSSL. * # 63671: libtcnative does not compile with OpenSSL < 1.1.0 and APR w/o threading support. * Correct configure message for OpenSSL libdir. * # 64260: Clean up install target. * # 64315: configure output for OpenSSL wrong/incomplete sometimes. * Drop obsolete build time workarounds for HP-UX. * Add support for FreeBSD's pthread_getthreadid_np() in our ssl_thread_id(void). * # 64316: Introduce tcn_get_thread_id(void) to reduce code duplication. * Fix linking against OpenSSL in non-standard locations on FreeBSD. * Add GPG keyring. * Version update to version 1.2.23: * See changelog.html for in-depth upstream changes * Version update to version 1.2.21: * Fix incompatibility with Tomcat (bsc#1130843) * Version update to version 1.2.16: * Fixes build breakage with newer version of openssl * Version update to version 1.2.4: * This connector to properly work requires openssl 1.0.2 or newer so do not backport to other codestreams. * Remove keyring file as there is new keyring and I didn't find it on the web * Update to version 1.1.32 * Fix: 53952: Add support for TLSv1.2 and TLSv1.1. * Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries. * Update: Use APR 1.5.1 with Windows binaries * version 1.1.30 * Fixed double-free in ssl_ocsp_request. Patch provided by Aristotelis. * Other minor bugfixes. Changes for tomcat: Update to Tomcat 9.0.123 * Catalina * Fix: When starting a web application, don't try and use the web application class loader until after the web application class loader has started. (markt) * Fix: various concurrency issues around adding and removing Realms from a CombinedRealm, in particular doing so while the CombinedRealm is in use. Note that once a Realm instance has been removed from a CombinedRealm instance at run-time, the removed Realm instance may not be reused apart from re-adding it to the same CombinedRealm. (markt) * Update: When StoreConfig re-writes an existing server.xml or context configuration file, preserve the layout of the existing file (comments, blank lines and attribute order) on a best effort basis. (remm) * Fix: Track in StandardContext whether the context was deployed from a Context element in server.xml. Use it to have StoreConfig save to a new config file. (remm) * Fix: Improve error handling on start-up. (markt) * Fix: byte range responses generated by DefaultServlet so a short resource stream read does not truncate the response. Treat a premature end of stream as an I/O error. Based on pull request #1067 by aoto-tech. (markt) * Fix: Align OpenSSLLifecycleListener with AprLifecycleListener and throw an Error when FIPS is requested but not available. (markt) * Fix: Ensure that, as per the documentation, a simple bind is always used when the JNDI realm binds using the user provided name and password to authenticate the user. (markt) * Update: Optimize Accept-Language header processing and use of resource budles for localization. (remm) * Coyote * Fix: 70236: Fix a stalled TLS handshake with the OpenSSL based implementations of SSLEngine when the first flight of handshake messages sent by the server is too large to fit in the buffer used by the BIO pair. Patch submitted by Lukas Hellebrandt. (remm) * Fix: #1073: Fix possible corruption when using HTTP/2 and async IO on uploads. Submitted by Tim Burke. (remm) * Fix: Avoid very rare race between async write notification and completion. Skip the write notification in these cases since it would be useless. (remm) * Fix: a timing issue that could cause large non-blocking writes to stall for AJP connections. (markt) * Fix: Ensure that the non-blocking write buffer is empty before sending an AJP end response message. (markt) * Fix: CharChunk.indexOf(char) so that it searches from the start of the chunk rather than from twice the chunk's start offset when the chunk does not begin at the start of its buffer. (breken-ai) * Fix: 70247: Fix a leak in the HTTP/2 connection flow control window when part of the HTTP request body is received but not read. Based on a patch provided by Guillaume Darmont. (markt) * Fix: 70251: Avoid closing a JarFile in CloseableURLConnection unless it is certain the JAR is not shared. (remm) * Fix: possible corruption of HTTP/1.1 chunked response bodies if a previous write to a chunked body fails. (markt) * Fix: Align cipher order with the results produced by OpenSSL if the cipher specification adds, removes and then re-adds ciphers. (markt) * Add: new attributes (unixDomainSocketParentPermissions and unixDomainSocketParentOwner) to the APR/Native connector to provide additional control over the security of Unix Domain Sockets. Additional checks (enabled by default) have also been added for the directory where the Unix Domain Socket will be created.(markt) * Fix: Correct a narrow race condition when processing HTTP/2 headers. * Fix: possible TLS connections failures caused by one of the flags Tomcat uses to track TLS handshake progress not being correctly reset. (markt) * Fix: Allow for absolute host names in SNI checks. (markt) * Fix: Correct a gap in asynchronous error handling that could lead to unexpected IllegalStateExceptions for some error conditions. (markt) * Add: Harden HTTP/2 against applications that do not correctly handle asynchronous errors. (markt) * Jasper * Fix: Route JspC servlet context logging through Ant when used as an Ant task. (sainadh777) * Fix: the tag plugin for the JSTL tag so that page processing ends with the redirect. (markt) * Web applications * Add: Documentation: Explicitly state that virtual host matching via the HTTP host header and TLS configuration matching via SNI are completely separate processes. (markt) * Fix: Examples: Draw axis-aligned rectangles and ellipses as lines in the WebSocket drawboard. (sainadh777) * Other * Update: the internal fork of Apache Commons BCEL to 6.13.0. (markt) * Update: to NSIS 3.13. (markt) * Update: to Byte Buddy 1.18.14. (markt) * Update: to Bouncy Castle 1.8.6. (markt) * Add: Improvements to French translations. (remm) * Add: Improvements to Japanese translations provided by tak7iji. (markt) * Cluster * Fix: Replicate SSO session key set changes made by removeSession() and sessionChangedId() in ClusterSingleSignOn so that SSO entries are correctly deregistered and removed from all nodes when the last associated session expires, even when the sessions expire on different cluster nodes. (remm) * Fix: Move context attributes that were set while the web application was still starting into the replicated attribute map when it is installed in ReplicatedContext, so that they are replicated to the other nodes like attributes set later on rather than remaining local to the node that started the application. (remm) * Fix: a possible deadlock in DeltaSession.expire(): the final session delta is now captured and sent to the cluster before the session monitor is acquired, because obtaining the delta takes the delta lock and code that runs while the delta lock is held, such as session attribute listener notifications, may in turn wait for the session monitor. (remm) * Fix: Fire the documented send_message_failure lifecycle event with the message, destination and exception when a SimpleTcpCluster message send fails and notifyLifecycleListenerOnFailure is enabled. The event was previously declared but never fired. (remm) * Fix: a possible deadlock in DeltaSession: session attribute listeners are no longer called while the delta lock is held when attributes are set or removed. The delta lock is only held while the change is recorded. (markt) * Fix: a possible deadlock in DeltaSession: received session deltas are now read into a separate DeltaRequest from the one the session uses to record local changes. This avoids having to hold the delta lock while processing received changes. (markt) * Fix: an issue replicating SessionListener additions and removals that meant some modification were not replicated leading to inconsistent listener configurations across the cluster. (markt) * Tribes * Docs: Document Tribes channel, membership, transport and replication status available through JMX. Based on pull request #1071 by sainadh777. * Fix: Improve the handling of AsyncContext.dispatch() when the Context attribute dispatchersUseEncodedPaths is set to false since the application has no control over the path used for the AsyncContext.dispatch(). Prior to this fix, paths containing literal '?' characters were truncated. (markt) * Fix: Ensure that capture groups from a RewriteCond always reflect the result of the current request. (markt) * Fix: When a PersistentManager needs to reduce the number of active sessions, swap out the least recently used eligible sessions first. Pull request #1045 provided by sainadh777. (markt) * Fix: Align web.xml logging output with the new Context attribute urlPatternsProvidedInDecodedForm. (markt) * Fix: Improve robustness of DIGEST authentication to system clock jumps. * Add: Support multiple protocol header values (treat as a single merged header value) in the RemoteIpFilter and RemoteIpValve. (markt) * Fix: potential concurrency issues when loading/saving sessions from/to a session store. Custom Store implementations that do not extend StoreBase must implement the new getSessionStoreLock() method of the Store interface to ensure concurrency protection. The default method implementation provided only provides the pre-fix functionality. (markt) * Fix: Ensure that PersistentManager implementations that extend PersistentManagerBase do not swap out sessions that are associated with a request that is currently being processed. As a result, it is now a requirement that the system property org.apache.catalina.session.StandardSession.ACTIVITY_CHECK is set to true (either explicitly or via STRICT_SERVLET_COMPLIANCE) if either minIdleSwap or maxIdleSwap are configured. (markt) * Fix: xreflection generated code stack overflow issue. (remm) * Fix: Align xreflection better with IntrospectionUtils. (remm) * Fix: In HTTP/2 after half closed (remote), any unexpected frame should be a stream error. (remm) * Fix: incorrect initial window size calculation when upgrading to HTTP/2. (remm) * Fix: Avoid HTTP/2 exceptions with invalid content-length values. (remm) * Fix: Only try and load the native library from the CATALINA_HOME system property when the property is set. (markt) * Fix: max connections enforcement after an enpoint resume. (remm) * Fix: Implement stricter ALPN matching for Connectors using FFM. (markt) * Add: length validation for ALPN protocol names. (markt) * Fix: Make FFM certificate verification more robust. (markt) * Fix: Align FFM OCSP URL parsing with Tomcat Native and treat a parsing failure as if no usable OCSP URLs were present. (markt) * Fix: Make the processing of OCSP responses more robust. (markt) * Fix: Stricter OCSP handling when soft-fail is disabled. (markt) * Fix: Cleaner handling of AJP response headers which overflow the maximum message size. (remm) * Fix: Small per performance optimisation. Don't waste cycles swallowing an AJP response body when the connection is going to be closed. (markt) * Fix: OpenSSL support for CRLs when using OpenSSL trust with the server key held in a Java key store. (markt) * Fix: Reject HTTP/1.0 or earlier requests that send a transfer-encoding header. (markt) * Fix: Ensure per request HTTP/2 bad request marker is cleared when the request is recycled. (markt) * Fix: Additional clean-up after HTTP/2 stream reset to aid GC. (markt) * Fix: Revert earlier refactoring of HTTP/2 header field validation that moved it earlier since the refactoring made correct handling of invalid headers more difficult. (markt) * Fix: EL evaluation of some lambda expressions. (remm) * WebSocket * Fix: an exception when an automatic Pong response races with the closing of the WebSocket session. (moritzfl) * Fix: Harden the WebSocket client and use a SecureRandom when generating the Sec-WebSocket-Key header. (markt) * Fix: Improve robustness of client handshakes. (remm) * Fix: Ensure that WebSocket write timeouts apply to the complete message and are not lost if two writes have the same timeout. (markt) * Fix: Reduce CPU usage while sending WebSocket close message. (markt) * Fix: overly broad check that prevented request URIs containing literal { and } characters from being mapped to WebSocket end points. (markt) * Fix: handling of WebSocket messages with compressed payloads using per- message-deflate that have one or more non-final blocks where the BFINAL bit is set. (markt) * Fix: handling of per-message-deflate context takeover when receiving compressed WebSocket messages. (markt) * Fix: Manager: Fix a potential concurrency issue when ordering sessions prior to displaying a list of session. (markt) * Docs: Wrap the RewriteRule regular expression syntax reference on narrow displays. Pull request #1044 by sainadh777. (markt) * Update: Easymock to 5.7.0. (markt) * Update: bnd to 7.4.0. (markt) * Update: Tomcat Native to 1.3.9. (markt) * Add: Improvements to Japanese translations provided by tak7iji and Ktamura.biz.80. (markt) * Fix: Validate that the DeltaManager attribute sendAllSessionsSize is a positive integer. Zero or negative values previously caused an infinite loop or a NegativeArraySizeException during session state transfer. Pull request #1042 provided by lihongyi87. (markt) * Fix: Improve robustness of cloud membership providers if an error occurs fetching members. (remm) * jdbc-pool * Fix: DataSourceProxy.getPooledConnection(String,String) now delegates to getConnection(String,String) rather than getConnection(). (markt) * Add: Log a warning if an attempt is made to obtain a connection with credentials when alternateUsernameAllowed is set to false. (markt) * Fix: Ensure StatementCache interceptor resets properties of cached statements between uses. (mark) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-4927 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4927 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libapr1-debuginfo-1.6.5-4.13.1 * libtcnative-1-0-debuginfo-1.3.9-3.9.1 * libtcnative-1-0-debugsource-1.3.9-3.9.1 * libtcnative-1-0-1.3.9-3.9.1 * libtcnative-1-0-devel-1.3.9-3.9.1 * libapr1-devel-1.6.5-4.13.1 * libapr1-debugsource-1.6.5-4.13.1 * libapr1-1.6.5-4.13.1 * SUSE Linux Enterprise Server 12 SP5 LTSS (noarch) * tomcat-webapps-9.0.123-3.182.2 * tomcat-el-3_0-api-9.0.123-3.182.2 * tomcat-docs-webapp-9.0.123-3.182.2 * tomcat-jsp-2_3-api-9.0.123-3.182.2 * tomcat-admin-webapps-9.0.123-3.182.2 * tomcat-lib-9.0.123-3.182.2 * tomcat-9.0.123-3.182.2 * tomcat-servlet-4_0-api-9.0.123-3.182.2 * tomcat-javadoc-9.0.123-3.182.2 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * libapr1-debuginfo-1.6.5-4.13.1 * libtcnative-1-0-debuginfo-1.3.9-3.9.1 * libtcnative-1-0-debugsource-1.3.9-3.9.1 * libtcnative-1-0-1.3.9-3.9.1 * libtcnative-1-0-devel-1.3.9-3.9.1 * libapr1-devel-1.6.5-4.13.1 * libapr1-debugsource-1.6.5-4.13.1 * libapr1-1.6.5-4.13.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (noarch) * tomcat-webapps-9.0.123-3.182.2 * tomcat-el-3_0-api-9.0.123-3.182.2 * tomcat-docs-webapp-9.0.123-3.182.2 * tomcat-jsp-2_3-api-9.0.123-3.182.2 * tomcat-admin-webapps-9.0.123-3.182.2 * tomcat-lib-9.0.123-3.182.2 * tomcat-9.0.123-3.182.2 * tomcat-servlet-4_0-api-9.0.123-3.182.2 * tomcat-javadoc-9.0.123-3.182.2 ## References: * https://www.suse.com/security/cve/CVE-2017-12613.html * https://www.suse.com/security/cve/CVE-2023-49582.html * https://www.suse.com/security/cve/CVE-2026-101296.html * https://www.suse.com/security/cve/CVE-2026-101356.html * https://www.suse.com/security/cve/CVE-2026-41293.html * https://www.suse.com/security/cve/CVE-2026-73581.html * https://www.suse.com/security/cve/CVE-2026-74048.html * https://www.suse.com/security/cve/CVE-2026-74049.html * https://www.suse.com/security/cve/CVE-2026-75973.html * https://www.suse.com/security/cve/CVE-2026-76183.html * https://www.suse.com/security/cve/CVE-2026-77756.html * https://www.suse.com/security/cve/CVE-2026-77762.html * https://www.suse.com/security/cve/CVE-2026-77791.html * https://www.suse.com/security/cve/CVE-2026-78383.html * https://www.suse.com/security/cve/CVE-2026-78437.html * https://www.suse.com/security/cve/CVE-2026-79677.html * https://www.suse.com/security/cve/CVE-2026-80353.html * https://www.suse.com/security/cve/CVE-2026-86243.html * https://www.suse.com/security/cve/CVE-2026-86246.html * https://www.suse.com/security/cve/CVE-2026-86247.html * https://www.suse.com/security/cve/CVE-2026-86248.html * https://www.suse.com/security/cve/CVE-2026-86350.html * https://www.suse.com/security/cve/CVE-2026-87022.html * https://www.suse.com/security/cve/CVE-2026-88041.html * https://www.suse.com/security/cve/CVE-2026-93446.html * https://bugzilla.suse.com/show_bug.cgi?id=1130843 * https://bugzilla.suse.com/show_bug.cgi?id=1151059 * https://bugzilla.suse.com/show_bug.cgi?id=1199170 * https://bugzilla.suse.com/show_bug.cgi?id=1260322 * https://bugzilla.suse.com/show_bug.cgi?id=1282581 * https://bugzilla.suse.com/show_bug.cgi?id=1282599 * https://bugzilla.suse.com/show_bug.cgi?id=1282620 * https://bugzilla.suse.com/show_bug.cgi?id=1282621 * https://bugzilla.suse.com/show_bug.cgi?id=1282622 * https://bugzilla.suse.com/show_bug.cgi?id=1282623 * https://bugzilla.suse.com/show_bug.cgi?id=1282624 * https://bugzilla.suse.com/show_bug.cgi?id=1282625 * https://bugzilla.suse.com/show_bug.cgi?id=1282626 * https://bugzilla.suse.com/show_bug.cgi?id=1282627 * https://bugzilla.suse.com/show_bug.cgi?id=1282628 * https://bugzilla.suse.com/show_bug.cgi?id=1282629 * https://bugzilla.suse.com/show_bug.cgi?id=1282630 * https://bugzilla.suse.com/show_bug.cgi?id=1282631 * https://bugzilla.suse.com/show_bug.cgi?id=1282787 * https://bugzilla.suse.com/show_bug.cgi?id=1286361 * https://bugzilla.suse.com/show_bug.cgi?id=1286362 * https://bugzilla.suse.com/show_bug.cgi?id=1286502 * https://bugzilla.suse.com/show_bug.cgi?id=1286555 * https://bugzilla.suse.com/show_bug.cgi?id=1286559 * https://bugzilla.suse.com/show_bug.cgi?id=1286571 * https://bugzilla.suse.com/show_bug.cgi?id=1286902 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:32:53 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 20:32:53 -0000 Subject: SUSE-SU-2026:4940-1: important: Security update for the Linux Kernel Message-ID: <179330597304.14826.4301594470107070006@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4940-1 Release Date: 2026-10-29T13:42:24Z Rating: important References: * bsc#1215199 * bsc#1255531 * bsc#1264267 * bsc#1264295 * bsc#1264614 * bsc#1264622 * bsc#1264851 * bsc#1265000 * bsc#1266694 * bsc#1266730 * bsc#1266757 * bsc#1268315 * bsc#1269561 * bsc#1272178 * bsc#1273040 * bsc#1273116 * bsc#1273290 * bsc#1273599 * bsc#1273751 * bsc#1273764 * bsc#1273865 * bsc#1274039 * bsc#1274256 * bsc#1274653 * bsc#1275510 * bsc#1275518 * bsc#1275564 * bsc#1275644 * bsc#1275785 * bsc#1275786 * bsc#1275964 * bsc#1276562 * bsc#1276791 * bsc#1276836 * bsc#1276873 * bsc#1276951 * bsc#1277174 * bsc#1277260 * bsc#1277310 * bsc#1277602 * bsc#1277603 * bsc#1277614 * bsc#1277691 * bsc#1277742 * bsc#1277747 * bsc#1277804 * bsc#1277821 * bsc#1277889 * bsc#1277894 * bsc#1277931 * bsc#1278232 * bsc#1279706 * bsc#1280179 * bsc#1280251 * bsc#1280259 * bsc#1280477 * bsc#1280743 * bsc#1280966 * bsc#1281144 * bsc#1281162 * bsc#1281280 * bsc#1281525 * bsc#1281726 * bsc#1281771 * bsc#1281819 * bsc#1281865 * bsc#1281979 * bsc#1281991 * bsc#1282742 * bsc#1282755 * bsc#1282761 * bsc#1282762 * bsc#1282768 * bsc#1282770 * bsc#1282784 * bsc#1282808 * bsc#1282932 * bsc#1283037 * bsc#1283142 * bsc#1283144 * bsc#1283736 * bsc#1283795 * bsc#1283823 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283936 * bsc#1283945 * bsc#1283946 * bsc#1283963 * bsc#1283979 * bsc#1284288 * bsc#1284289 * bsc#1284291 * bsc#1284295 * bsc#1284408 * bsc#1284415 * bsc#1284424 * bsc#1284429 * bsc#1284462 * bsc#1284518 * bsc#1284559 * bsc#1284581 * bsc#1284606 * bsc#1284647 * bsc#1284649 * bsc#1284655 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285880 * bsc#1285989 * jsc#PED-11016 * jsc#PED-13872 Cross-References: * CVE-2025-68358 * CVE-2026-43091 * CVE-2026-43132 * CVE-2026-43184 * CVE-2026-43283 * CVE-2026-43299 * CVE-2026-43457 * CVE-2026-45865 * CVE-2026-45930 * CVE-2026-46034 * CVE-2026-53108 * CVE-2026-63830 * CVE-2026-63983 * CVE-2026-64012 * CVE-2026-64070 * CVE-2026-64116 * CVE-2026-64280 * CVE-2026-64422 * CVE-2026-64424 * CVE-2026-64428 * CVE-2026-64461 * CVE-2026-68233 * CVE-2026-68241 * CVE-2026-68242 * CVE-2026-68323 * CVE-2026-72015 * CVE-2026-72040 * CVE-2026-72041 * CVE-2026-72081 * CVE-2026-72172 * CVE-2026-72212 * CVE-2026-72213 * CVE-2026-72236 * CVE-2026-72301 * CVE-2026-72305 * CVE-2026-72319 * CVE-2026-72493 * CVE-2026-74312 * CVE-2026-74379 * CVE-2026-74544 * CVE-2026-74578 * CVE-2026-74583 * CVE-2026-74587 * CVE-2026-74611 * CVE-2026-74614 * CVE-2026-74653 * CVE-2026-74723 * CVE-2026-80579 * CVE-2026-80893 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89669 * CVE-2026-89685 * CVE-2026-89706 * CVE-2026-89778 * CVE-2026-89811 * CVE-2026-89987 * CVE-2026-90011 * CVE-2026-90101 * CVE-2026-90283 * CVE-2026-90289 * CVE-2026-90315 * CVE-2026-90430 * CVE-2026-92488 * CVE-2026-93134 * CVE-2026-93222 * CVE-2026-93252 * CVE-2026-93787 * CVE-2026-93800 * CVE-2026-93806 * CVE-2026-93820 * CVE-2026-93821 * CVE-2026-93822 * CVE-2026-97415 * CVE-2026-97416 * CVE-2026-97491 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-97571 * CVE-2026-97574 * CVE-2026-97595 * CVE-2026-97945 * CVE-2026-98010 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98077 * CVE-2026-98089 * CVE-2026-98130 * CVE-2026-98173 * CVE-2026-98216 * CVE-2026-98248 * CVE-2026-98252 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98269 * CVE-2026-98273 * CVE-2026-98323 * CVE-2026-98347 * CVE-2026-98352 * CVE-2026-98354 * CVE-2026-98357 * CVE-2026-98358 * CVE-2026-98359 * CVE-2026-98360 * CVE-2026-98365 * CVE-2026-98366 * CVE-2026-98367 * CVE-2026-99999 CVSS scores: * CVE-2025-68358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-68358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2025-68358 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43091 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43132 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43132 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43184 ( SUSE ): 5.3 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-43184 ( SUSE ): 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-43184 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-43283 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43283 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43299 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43299 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43299 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43457 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45865 ( SUSE ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N * CVE-2026-45865 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-45930 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46034 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46034 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-53108 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-53108 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-63830 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-63830 ( NVD ): 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-63983 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-63983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64012 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64070 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64070 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64116 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64116 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64280 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-64422 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64422 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-64424 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64424 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-64428 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64428 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-64461 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-64461 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68233 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-68233 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-68241 ( SUSE ): 5.1 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68241 ( SUSE ): 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68242 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-68242 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-68323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72015 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72015 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72040 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72040 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72081 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72172 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-72172 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72172 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72212 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-72213 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-72236 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72305 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2026-72319 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72319 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72319 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74312 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74312 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74379 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-74379 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74544 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-74544 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-74544 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74583 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74583 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-74611 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74611 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74614 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74614 ( NVD ): 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74653 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74723 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80579 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-80579 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80579 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-80893 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-80893 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89685 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89706 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N * CVE-2026-89778 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H * CVE-2026-89778 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89811 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H * CVE-2026-89811 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-89987 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-89987 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90101 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-90283 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-90289 ( SUSE ): 3.1 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-90289 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90315 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90430 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-92488 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2026-92488 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93134 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93222 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93252 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-93252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93787 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93787 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93787 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-93800 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H * CVE-2026-93806 ( SUSE ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-93806 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93820 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93820 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93821 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93821 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-93822 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-93822 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97415 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97415 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H * CVE-2026-97415 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97416 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97416 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H * CVE-2026-97491 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97571 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-97571 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97574 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( SUSE ): 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-97595 ( NVD ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97945 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98010 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98077 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98077 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98089 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( SUSE ): 7.7 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98173 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98173 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-98216 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98216 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98252 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98252 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98269 ( SUSE ): 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L * CVE-2026-98273 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98273 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98347 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98347 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98352 ( SUSE ): 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L * CVE-2026-98354 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98354 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98358 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98358 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98360 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2026-98360 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98365 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98365 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2026-98365 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98366 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98367 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-98367 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-98367 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Real Time Module 15-SP7 An update that solves 108 vulnerabilities, contains two features and has six security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). * CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). * CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). * CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). * CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). * CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851). * CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). * CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694). * CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730). * CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). * CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561). * CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178). * CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040). * CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). * CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116). * CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). * CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599). * CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). * CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256). * CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039). * CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865). * CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644). * CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785). * CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786). * CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653). * CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791). * CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174). * CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691). * CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602). * CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603). * CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747). * CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873). * CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232). * CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out- of-bounds (bsc#1277894). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804). * CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931). * CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310). * CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562). * CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode (bsc#1277260). * CVE-2026-80893: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() (bsc#1279706). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-89685: nfsd: fix clock domain mismatch in clients_still_reclaiming() (bsc#1280179). * CVE-2026-89706: NFSD: Limit the number of concurrent async COPY operations (bsc#1280477). * CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966). * CVE-2026-89811: drm/amdkfd: Add TLB flush after MES queue eviction/suspension (bsc#1281144). * CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90101: bnxt_en: Fix call to hardware monitoring event handler (bsc#1281525). * CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771). * CVE-2026-90289: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). * CVE-2026-90315: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). * CVE-2026-90430: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). * CVE-2026-92488: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). * CVE-2026-93134: printk: Fix possible console use-after-free (bsc#1281162). * CVE-2026-93222: signal: avoid shared siginfo namespace rewrites (bsc#1282742). * CVE-2026-93252: ocfs2: fix circular locking dependency in ocfs2_init_acl() (bsc#1282784). * CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932). * CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808). * CVE-2026-93806: wifi: cfg80211: validate assoc response length before status and IE access (bsc#1283037). * CVE-2026-97415: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF (bsc#1282768). * CVE-2026-97416: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() (bsc#1282770). * CVE-2026-97491: net/rds: Don't sleep inside rds_ib_conn_path_shutdown (bsc#1283142). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-97571: bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() (bsc#1283945). * CVE-2026-97574: bnxt_en: Don't free the live ring's TPA state on queue restart failure (bsc#1283795). * CVE-2026-97595: mac802154: fix use-after-free of sdata via queued RX frames (bsc#1283736). * CVE-2026-97945: replace with mainline version and update References (bsc#1283144). * CVE-2026-98010: net/sched: drr: clamp quantum in change class (bsc#1283823). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98077: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() (bsc#1283979). * CVE-2026-98089: bonding: alb: fix uninitialized transport header access in alb_determine_nd() (bsc#1283936). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415). * CVE-2026-98216: IB/hfi1: Fix the PIO_CRED credit-return mmap (bsc#1284559). * CVE-2026-98252: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() (bsc#1284581). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98269: btrfs: abort transaction on failure to update inode for hole punching and reflinking (bsc#1284606). * CVE-2026-98273: x86/kprobes: Fix crash when probing CS CALL instructions (bsc#1284462). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98347: IB/IPoIB: Avoid restoring OPER_UP after multicast flush (bsc#1284295). * CVE-2026-98352: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted (bsc#1284647). * CVE-2026-98354: RDMA/mad: Fix receive buffer leak when PKey enforcement fails (bsc#1284291). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98358: IB/iser: reject a remote invalidation of an unregistered direction (bsc#1284289). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98360: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds (bsc#1284649). * CVE-2026-98365: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access (bsc#1284288). * CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655). * CVE-2026-98367: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept (bsc#1284424). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issues were fixed: * ASoC: adau1372: allow sleepy powerdown GPIOs (git-fixes). * ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes (git- fixes). * ASoC: cs42l52: Fix the NG Type Switch bit (git-fixes). * ASoC: cs42l56: Put the Limiter Cushion control on the limiter register (git- fixes). * ASoC: Intel: avs: Reset the stream unless it is already prepared (git- fixes). * ASoC: max98371: Fix the Speaker DHT Min Volume bits (git-fixes). * ASoC: nau8822: Fix the 128x oversampling switch bits (git-fixes). * ASoC: pcm3168a: Fix the DAC zero flag polarity bit (git-fixes). * ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM (git- fixes). * ASoC: stm32: spdifrx: fix synchronization state check (git-fixes). * ASoC: wm8978: Fix the 128x oversampling switch bits (git-fixes). * Bluetooth: btintel: fix buffer over-read in btintel_hw_error() (git-fixes). * Bluetooth: btintel: validate DDC record lengths (git-fixes). * Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() (git-fixes). * Bluetooth: btintel_pcie: fix TX descriptor bounds check (git-fixes). * Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() (git- fixes). * Bluetooth: btintel_pcie: use managed IRQ teardown (git-fixes). * Bluetooth: hci_conn: Lock parent access during enhanced SCO setup (git- fixes). * Bluetooth: hci_core: free the HCI ID if naming fails (git-fixes). * Bluetooth: hci_core: Serialize ACL scheduling with channel deletion (git- fixes). * Bluetooth: hci_core: Serialize fragmented ISO packet queueing (git-fixes). * Bluetooth: hci_sock: Serialize dead-device detachment (git-fixes). * Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister (git-fixes). * Bluetooth: hci_sync: Fix inquiry cache use-after-free (git-fixes). * Bluetooth: ISO: Reject concurrent BIS listener setup (git-fixes). * Bluetooth: ISO: Serialize concurrent connect calls (git-fixes). * Bluetooth: MGMT: Fix status of pending commands flushed on power off (git- fixes). * Bluetooth: RFCOMM: Fix initial port reference race (git-fixes). * Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown (git- fixes). * Bluetooth: RFCOMM: free the skb when the DLC has no owner (git-fixes). * crypto: ccp - Add support for PCI device 0x17D8 (jsc#PED-13872). * Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes). * Drivers: hv: Don't reset VMBus connection state on error/exit paths (git- fixes). * Drivers: hv: vmbus: fix typo "substract" in comment (git-fixes). * drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set (git-fixes). * drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks (git- fixes). * drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr (git- fixes). * drm/amdkfd: align SDMA doorbell base for shader doorbell writes (git-fixes). * drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info (git-fixes). * drm/aspeed: Balance the display clock enable on teardown (git-fixes). * drm/dp: don't mark the AUX backlight enabled when enabling failed (git- fixes). * drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN (git-fixes). * drm/gud: don't keep a connector without a CRTC as connector_state (git- fixes). * drm/i915/gem: Prevent overstepping exec array boundary (git-fixes). * drm/i915/gt: Unmask interrupts only when ACTIVE is true (git-fixes). * drm/imagination: Fix reference and vm_bo handling in remap() (git-fixes). * drm/imagination: Size page table preallocation by device address (git- fixes). * drm/vc4: drain the hangcheck timer and works on V3D unbind (git-fixes). * drm/vc4: Free the BO cache size list on teardown (git-fixes). * drm/vc4: hdmi: Move packet RAM enable to PM runtime (git-fixes). * gpio: exar: initialize the ID before registering its cleanup (git-fixes). * gpio: xilinx: fix runtime PM leak on request error path (git-fixes). * IB/hfi1: Resolve the credit-return buffer through the send context's node (git-fixes). * KVM: PPC: Book3S HV: Add H_VIRT mapping for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add missing mappings for tracing exits (bsc#1215199). * KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users (bsc#1215199). * KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls (bsc#1215199). * KVM: PPC: Book3S HV: Free the queue pages in error path (bsc#1215199). * KVM: PPC: Fix callback check in kvmppc_gsm_refresh_info (jsc#PED-11016 git- fixes). * KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form (bsc#1215199). * KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy (git- fixes). * KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails (git- fixes). * memstick: core: wait for request completion before freeing card (git-fixes). * memstick: rtsx_usb_ms: complete requests after eject instead of dropping them (git-fixes). * mmc: cavium-octeon: destroy slot platform devices on remove (git-fixes). * mmc: cavium-thunderx: destroy slot platform devices on remove (git-fixes). * mmc: mtk-sd: Cancel request timeout work on remove (git-fixes). * mmc: sdhci-sprd: disable runtime PM on remove (git-fixes). * net: mana: reserve RX buffer headroom to fix forwarding performance (git- fixes). * net: mctp-i2c: fix duplicate reception of old data (bsc#1266730). * net: usb: ax88179_178a: fix rx frame length for non-last packets (git- fixes). * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). * PCI: hv: Probe vPCI buses asynchronously (git-fixes). * PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes). * pinctrl: amd: Clear S4 wake bits when firmware has _AEI (git-fixes). * power: supply: ds2780: Fix ds2780_get_capacity() returning raw value (git- fixes). * power: supply: Fix maintenance charge table kernel-doc (git-fixes). * power: supply: generic-adc-battery: Fix temperature IIO channel conversion (git-fixes). * powerpc/fadump: collect dump when CPU_STATE_DATA is less than reserved (bsc#1268315 ltc#217645). * powerpc/interrupt: Use early_radix_enabled() in NMI real-mode guard (bsc#1215199). * printk: Handle pre-enabled consoles in the top-level register_console() (bsc#1285989). * pseries/plpks: clear SED key data after use (bsc#1215199). * pseries/plpks: clear sensitive PLPKS buffers (bsc#1215199). * pseries/plpks: clear signed update authentication buffer (bsc#1215199). * pseries/plpks: fix error handling in plpks_read_var() (bsc#1215199). * pseries/plpks: make narrowing conversions explicit (bsc#1215199). * pseries/plpks: validate input to plpks_signed_update_var() (bsc#1215199). * regulator: ltc3676: don't read the write-only HRST and CLIRQ registers (git- fixes). * s390/cio: Purge based on the cdev's online status (bsc#1284429). * s390/topology: Use zero-based numbering for containing (bsc#1275518). * selftests/net: convert arp_ndisc_untracked_subnets.sh to run it in unique namespace (bsc#1285880). * serial: 8250: dispatch SysRq character in serial8250_handle_irq() (git- fixes). * tools/hv: fix typo "retrive" in comment (git-fixes). * tools: gpio: fix building from the top level with O= (git-fixes). * vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF (git-fixes). * wifi: brcmfmac: fix P2P device removal race in brcmf_detach() (git-fixes). * wifi: mt76: mt792x: pick the SAR table layout from the table itself (git- fixes). * wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit (git-fixes). * xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit (bsc#1264267). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2026-4940 * SUSE Real Time Module 15-SP7 zypper in -t patch SUSE-SLE-Module-RT-15-SP7-2026-4940 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-6_4_0-150700_7_81-rt-1-150700.1.3.1 * kernel-livepatch-SLE15-SP7-RT_Update_22-debugsource-1-150700.1.3.1 * kernel-livepatch-6_4_0-150700_7_81-rt-debuginfo-1-150700.1.3.1 * SUSE Real Time Module 15-SP7 (x86_64) * kernel-rt-devel-6.4.0-150700.7.81.1 * gfs2-kmp-rt-6.4.0-150700.7.81.1 * ocfs2-kmp-rt-6.4.0-150700.7.81.1 * kernel-rt-debugsource-6.4.0-150700.7.81.1 * dlm-kmp-rt-6.4.0-150700.7.81.1 * kernel-rt-devel-debuginfo-6.4.0-150700.7.81.1 * cluster-md-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * ocfs2-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * kernel-rt-debuginfo-6.4.0-150700.7.81.1 * cluster-md-kmp-rt-6.4.0-150700.7.81.1 * gfs2-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * kernel-syms-rt-6.4.0-150700.7.81.1 * dlm-kmp-rt-debuginfo-6.4.0-150700.7.81.1 * SUSE Real Time Module 15-SP7 (noarch) * kernel-devel-rt-6.4.0-150700.7.81.1 * kernel-source-rt-6.4.0-150700.7.81.1 * SUSE Real Time Module 15-SP7 (nosrc x86_64) * kernel-rt-6.4.0-150700.7.81.1 ## References: * https://www.suse.com/security/cve/CVE-2025-68358.html * https://www.suse.com/security/cve/CVE-2026-43091.html * https://www.suse.com/security/cve/CVE-2026-43132.html * https://www.suse.com/security/cve/CVE-2026-43184.html * https://www.suse.com/security/cve/CVE-2026-43283.html * https://www.suse.com/security/cve/CVE-2026-43299.html * https://www.suse.com/security/cve/CVE-2026-43457.html * https://www.suse.com/security/cve/CVE-2026-45865.html * https://www.suse.com/security/cve/CVE-2026-45930.html * https://www.suse.com/security/cve/CVE-2026-46034.html * https://www.suse.com/security/cve/CVE-2026-53108.html * https://www.suse.com/security/cve/CVE-2026-63830.html * https://www.suse.com/security/cve/CVE-2026-63983.html * https://www.suse.com/security/cve/CVE-2026-64012.html * https://www.suse.com/security/cve/CVE-2026-64070.html * https://www.suse.com/security/cve/CVE-2026-64116.html * https://www.suse.com/security/cve/CVE-2026-64280.html * https://www.suse.com/security/cve/CVE-2026-64422.html * https://www.suse.com/security/cve/CVE-2026-64424.html * https://www.suse.com/security/cve/CVE-2026-64428.html * https://www.suse.com/security/cve/CVE-2026-64461.html * https://www.suse.com/security/cve/CVE-2026-68233.html * https://www.suse.com/security/cve/CVE-2026-68241.html * https://www.suse.com/security/cve/CVE-2026-68242.html * https://www.suse.com/security/cve/CVE-2026-68323.html * https://www.suse.com/security/cve/CVE-2026-72015.html * https://www.suse.com/security/cve/CVE-2026-72040.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72081.html * https://www.suse.com/security/cve/CVE-2026-72172.html * https://www.suse.com/security/cve/CVE-2026-72212.html * https://www.suse.com/security/cve/CVE-2026-72213.html * https://www.suse.com/security/cve/CVE-2026-72236.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72305.html * https://www.suse.com/security/cve/CVE-2026-72319.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74312.html * https://www.suse.com/security/cve/CVE-2026-74379.html * https://www.suse.com/security/cve/CVE-2026-74544.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74583.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74611.html * https://www.suse.com/security/cve/CVE-2026-74614.html * https://www.suse.com/security/cve/CVE-2026-74653.html * https://www.suse.com/security/cve/CVE-2026-74723.html * https://www.suse.com/security/cve/CVE-2026-80579.html * https://www.suse.com/security/cve/CVE-2026-80893.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-89685.html * https://www.suse.com/security/cve/CVE-2026-89706.html * https://www.suse.com/security/cve/CVE-2026-89778.html * https://www.suse.com/security/cve/CVE-2026-89811.html * https://www.suse.com/security/cve/CVE-2026-89987.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90101.html * https://www.suse.com/security/cve/CVE-2026-90283.html * https://www.suse.com/security/cve/CVE-2026-90289.html * https://www.suse.com/security/cve/CVE-2026-90315.html * https://www.suse.com/security/cve/CVE-2026-90430.html * https://www.suse.com/security/cve/CVE-2026-92488.html * https://www.suse.com/security/cve/CVE-2026-93134.html * https://www.suse.com/security/cve/CVE-2026-93222.html * https://www.suse.com/security/cve/CVE-2026-93252.html * https://www.suse.com/security/cve/CVE-2026-93787.html * https://www.suse.com/security/cve/CVE-2026-93800.html * https://www.suse.com/security/cve/CVE-2026-93806.html * https://www.suse.com/security/cve/CVE-2026-93820.html * https://www.suse.com/security/cve/CVE-2026-93821.html * https://www.suse.com/security/cve/CVE-2026-93822.html * https://www.suse.com/security/cve/CVE-2026-97415.html * https://www.suse.com/security/cve/CVE-2026-97416.html * https://www.suse.com/security/cve/CVE-2026-97491.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-97571.html * https://www.suse.com/security/cve/CVE-2026-97574.html * https://www.suse.com/security/cve/CVE-2026-97595.html * https://www.suse.com/security/cve/CVE-2026-97945.html * https://www.suse.com/security/cve/CVE-2026-98010.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98077.html * https://www.suse.com/security/cve/CVE-2026-98089.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98173.html * https://www.suse.com/security/cve/CVE-2026-98216.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98252.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98269.html * https://www.suse.com/security/cve/CVE-2026-98273.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98347.html * https://www.suse.com/security/cve/CVE-2026-98352.html * https://www.suse.com/security/cve/CVE-2026-98354.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98358.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98360.html * https://www.suse.com/security/cve/CVE-2026-98365.html * https://www.suse.com/security/cve/CVE-2026-98366.html * https://www.suse.com/security/cve/CVE-2026-98367.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1215199 * https://bugzilla.suse.com/show_bug.cgi?id=1255531 * https://bugzilla.suse.com/show_bug.cgi?id=1264267 * https://bugzilla.suse.com/show_bug.cgi?id=1264295 * https://bugzilla.suse.com/show_bug.cgi?id=1264614 * https://bugzilla.suse.com/show_bug.cgi?id=1264622 * https://bugzilla.suse.com/show_bug.cgi?id=1264851 * https://bugzilla.suse.com/show_bug.cgi?id=1265000 * https://bugzilla.suse.com/show_bug.cgi?id=1266694 * https://bugzilla.suse.com/show_bug.cgi?id=1266730 * https://bugzilla.suse.com/show_bug.cgi?id=1266757 * https://bugzilla.suse.com/show_bug.cgi?id=1268315 * https://bugzilla.suse.com/show_bug.cgi?id=1269561 * https://bugzilla.suse.com/show_bug.cgi?id=1272178 * https://bugzilla.suse.com/show_bug.cgi?id=1273040 * https://bugzilla.suse.com/show_bug.cgi?id=1273116 * https://bugzilla.suse.com/show_bug.cgi?id=1273290 * https://bugzilla.suse.com/show_bug.cgi?id=1273599 * https://bugzilla.suse.com/show_bug.cgi?id=1273751 * https://bugzilla.suse.com/show_bug.cgi?id=1273764 * https://bugzilla.suse.com/show_bug.cgi?id=1273865 * https://bugzilla.suse.com/show_bug.cgi?id=1274039 * https://bugzilla.suse.com/show_bug.cgi?id=1274256 * https://bugzilla.suse.com/show_bug.cgi?id=1274653 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275518 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1275644 * https://bugzilla.suse.com/show_bug.cgi?id=1275785 * https://bugzilla.suse.com/show_bug.cgi?id=1275786 * https://bugzilla.suse.com/show_bug.cgi?id=1275964 * https://bugzilla.suse.com/show_bug.cgi?id=1276562 * https://bugzilla.suse.com/show_bug.cgi?id=1276791 * https://bugzilla.suse.com/show_bug.cgi?id=1276836 * https://bugzilla.suse.com/show_bug.cgi?id=1276873 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277174 * https://bugzilla.suse.com/show_bug.cgi?id=1277260 * https://bugzilla.suse.com/show_bug.cgi?id=1277310 * https://bugzilla.suse.com/show_bug.cgi?id=1277602 * https://bugzilla.suse.com/show_bug.cgi?id=1277603 * https://bugzilla.suse.com/show_bug.cgi?id=1277614 * https://bugzilla.suse.com/show_bug.cgi?id=1277691 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277747 * https://bugzilla.suse.com/show_bug.cgi?id=1277804 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1277889 * https://bugzilla.suse.com/show_bug.cgi?id=1277894 * https://bugzilla.suse.com/show_bug.cgi?id=1277931 * https://bugzilla.suse.com/show_bug.cgi?id=1278232 * https://bugzilla.suse.com/show_bug.cgi?id=1279706 * https://bugzilla.suse.com/show_bug.cgi?id=1280179 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280477 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1280966 * https://bugzilla.suse.com/show_bug.cgi?id=1281144 * https://bugzilla.suse.com/show_bug.cgi?id=1281162 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281525 * https://bugzilla.suse.com/show_bug.cgi?id=1281726 * https://bugzilla.suse.com/show_bug.cgi?id=1281771 * https://bugzilla.suse.com/show_bug.cgi?id=1281819 * https://bugzilla.suse.com/show_bug.cgi?id=1281865 * https://bugzilla.suse.com/show_bug.cgi?id=1281979 * https://bugzilla.suse.com/show_bug.cgi?id=1281991 * https://bugzilla.suse.com/show_bug.cgi?id=1282742 * https://bugzilla.suse.com/show_bug.cgi?id=1282755 * https://bugzilla.suse.com/show_bug.cgi?id=1282761 * https://bugzilla.suse.com/show_bug.cgi?id=1282762 * https://bugzilla.suse.com/show_bug.cgi?id=1282768 * https://bugzilla.suse.com/show_bug.cgi?id=1282770 * https://bugzilla.suse.com/show_bug.cgi?id=1282784 * https://bugzilla.suse.com/show_bug.cgi?id=1282808 * https://bugzilla.suse.com/show_bug.cgi?id=1282932 * https://bugzilla.suse.com/show_bug.cgi?id=1283037 * https://bugzilla.suse.com/show_bug.cgi?id=1283142 * https://bugzilla.suse.com/show_bug.cgi?id=1283144 * https://bugzilla.suse.com/show_bug.cgi?id=1283736 * https://bugzilla.suse.com/show_bug.cgi?id=1283795 * https://bugzilla.suse.com/show_bug.cgi?id=1283823 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283936 * https://bugzilla.suse.com/show_bug.cgi?id=1283945 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1283979 * https://bugzilla.suse.com/show_bug.cgi?id=1284288 * https://bugzilla.suse.com/show_bug.cgi?id=1284289 * https://bugzilla.suse.com/show_bug.cgi?id=1284291 * https://bugzilla.suse.com/show_bug.cgi?id=1284295 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284415 * https://bugzilla.suse.com/show_bug.cgi?id=1284424 * https://bugzilla.suse.com/show_bug.cgi?id=1284429 * https://bugzilla.suse.com/show_bug.cgi?id=1284462 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284559 * https://bugzilla.suse.com/show_bug.cgi?id=1284581 * https://bugzilla.suse.com/show_bug.cgi?id=1284606 * https://bugzilla.suse.com/show_bug.cgi?id=1284647 * https://bugzilla.suse.com/show_bug.cgi?id=1284649 * https://bugzilla.suse.com/show_bug.cgi?id=1284655 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285880 * https://bugzilla.suse.com/show_bug.cgi?id=1285989 * https://jira.suse.com/browse/PED-11016 * https://jira.suse.com/browse/PED-13872 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:33:08 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 20:33:08 -0000 Subject: SUSE-SU-2026:4941-1: important: Security update for python313 Message-ID: <179330598802.14826.3657975807873979390@f5dd93353bb2> # Security update for python313 Announcement ID: SUSE-SU-2026:4941-1 Release Date: 2026-10-29T14:06:00Z Rating: important References: * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves seven vulnerabilities and has one security fix can now be installed. ## Description: This update for python313 fixes the following issues: * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python313: * Updated to version 3.13.16. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4941 ## Package List: * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python313-curses-debuginfo-3.13.16-150700.4.61.1 * libpython3_13-1_0-debuginfo-3.13.16-150700.4.61.1 * python313-curses-3.13.16-150700.4.61.1 * python313-3.13.16-150700.4.61.1 * python313-core-debugsource-3.13.16-150700.4.61.1 * python313-tk-3.13.16-150700.4.61.1 * libpython3_13-1_0-3.13.16-150700.4.61.1 * python313-base-3.13.16-150700.4.61.1 * python313-base-debuginfo-3.13.16-150700.4.61.1 * python313-idle-3.13.16-150700.4.61.1 * python313-tk-debuginfo-3.13.16-150700.4.61.1 * python313-debuginfo-3.13.16-150700.4.61.1 * python313-dbm-3.13.16-150700.4.61.1 * python313-devel-3.13.16-150700.4.61.1 * python313-tools-3.13.16-150700.4.61.1 * python313-dbm-debuginfo-3.13.16-150700.4.61.1 * python313-debugsource-3.13.16-150700.4.61.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:33:49 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 20:33:49 -0000 Subject: SUSE-SU-2026:4939-1: important: Security update for the Linux Kernel Message-ID: <179330602912.14826.14221896468311999041@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4939-1 Release Date: 2026-10-29T13:40:42Z Rating: important References: * bsc#1227103 * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277821 * bsc#1280176 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2024-39468 * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2024-39468 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-39468 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that solves 27 vulnerabilities and has one security fix can now be installed. ## Description: The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176). * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issue was fixed: * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4939 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4939 ## Package List: * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.192.2 * kernel-rt-debugsource-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64) * kernel-rt-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * kernel-rt-debuginfo-5.14.21-150400.15.192.2 * kernel-rt-debugsource-5.14.21-150400.15.192.2 * SUSE Linux Enterprise Micro 5.4 (noarch) * kernel-source-rt-5.14.21-150400.15.192.2 ## References: * https://www.suse.com/security/cve/CVE-2024-39468.html * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1227103 * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280176 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Thu Oct 29 20:34:28 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Thu, 29 Oct 2026 20:34:28 -0000 Subject: SUSE-SU-2026:4938-1: important: Security update for the Linux Kernel Message-ID: <179330606854.14826.9768185524631066461@f5dd93353bb2> # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:4938-1 Release Date: 2026-10-29T13:39:41Z Rating: important References: * bsc#1275510 * bsc#1275564 * bsc#1276951 * bsc#1277357 * bsc#1277599 * bsc#1277742 * bsc#1277821 * bsc#1280251 * bsc#1280259 * bsc#1280387 * bsc#1280743 * bsc#1281280 * bsc#1281397 * bsc#1283835 * bsc#1283851 * bsc#1283894 * bsc#1283946 * bsc#1283963 * bsc#1284064 * bsc#1284408 * bsc#1284518 * bsc#1284713 * bsc#1284746 * bsc#1284790 * bsc#1284791 * bsc#1285684 * bsc#1285685 Cross-References: * CVE-2026-72041 * CVE-2026-72110 * CVE-2026-72301 * CVE-2026-72493 * CVE-2026-74578 * CVE-2026-74587 * CVE-2026-74624 * CVE-2026-80977 * CVE-2026-89528 * CVE-2026-89542 * CVE-2026-89669 * CVE-2026-90011 * CVE-2026-90088 * CVE-2026-97555 * CVE-2026-97564 * CVE-2026-98015 * CVE-2026-98016 * CVE-2026-98041 * CVE-2026-98130 * CVE-2026-98248 * CVE-2026-98253 * CVE-2026-98260 * CVE-2026-98323 * CVE-2026-98357 * CVE-2026-98359 * CVE-2026-98432 * CVE-2026-99999 CVSS scores: * CVE-2026-72041 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-72041 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-72041 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-72110 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72110 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72301 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2026-72301 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-72493 ( NVD ): 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-74578 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N * CVE-2026-74578 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N * CVE-2026-74587 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-74587 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-74624 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-74624 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-80977 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-80977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89528 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89528 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-89542 ( SUSE ): 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H * CVE-2026-89542 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-89669 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-90011 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-90011 ( NVD ): 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-90088 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97555 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97555 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-97555 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-97564 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-97564 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98015 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98015 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98016 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98016 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98041 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98130 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98248 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98248 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98253 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98260 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98260 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98323 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98323 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( SUSE ): 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98357 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98359 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98359 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-98432 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-98432 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-99999 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-99999 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-99999 ( NVD ): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise Micro 5.5 An update that solves 27 vulnerabilities can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: * CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510). * CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357). * CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742). * CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951). * CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564). * CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821). * CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599). * CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259). * CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743). * CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387). * CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251). * CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280). * CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397). * CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851). * CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946). * CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963). * CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894). * CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064). * CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835). * CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518). * CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790). * CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408). * CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713). * CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791). * CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746). * CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685). * CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684). The following non security issue was fixed: * netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-4938 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4938 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-devel-5.14.21-150500.13.167.2 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * cluster-md-kmp-rt-5.14.21-150500.13.167.2 * kernel-syms-rt-5.14.21-150500.13.167.1 * kernel-rt-devel-5.14.21-150500.13.167.2 * kselftests-kmp-rt-5.14.21-150500.13.167.2 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * reiserfs-kmp-rt-5.14.21-150500.13.167.2 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-debugsource-5.14.21-150500.13.167.2 * kernel-rt-livepatch-devel-5.14.21-150500.13.167.2 * kernel-rt-vdso-5.14.21-150500.13.167.2 * kernel-rt-optional-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-devel-debuginfo-5.14.21-150500.13.167.2 * dlm-kmp-rt-5.14.21-150500.13.167.2 * kernel-rt-extra-5.14.21-150500.13.167.2 * kernel-rt-livepatch-5.14.21-150500.13.167.2 * kernel-rt_debug-debugsource-5.14.21-150500.13.167.2 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-vdso-5.14.21-150500.13.167.2 * kernel-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-extra-debuginfo-5.14.21-150500.13.167.2 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.167.2 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * gfs2-kmp-rt-5.14.21-150500.13.167.2 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.167.2 * ocfs2-kmp-rt-5.14.21-150500.13.167.2 * kernel-rt-optional-5.14.21-150500.13.167.2 * kernel-rt_debug-debuginfo-5.14.21-150500.13.167.2 * openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.167.2 * kernel-source-rt-5.14.21-150500.13.167.2 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.167.2 * kernel-rt_debug-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.167.2 * kernel-source-rt-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.167.2 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debuginfo-5.14.21-150500.13.167.2 * kernel-rt-debugsource-5.14.21-150500.13.167.2 ## References: * https://www.suse.com/security/cve/CVE-2026-72041.html * https://www.suse.com/security/cve/CVE-2026-72110.html * https://www.suse.com/security/cve/CVE-2026-72301.html * https://www.suse.com/security/cve/CVE-2026-72493.html * https://www.suse.com/security/cve/CVE-2026-74578.html * https://www.suse.com/security/cve/CVE-2026-74587.html * https://www.suse.com/security/cve/CVE-2026-74624.html * https://www.suse.com/security/cve/CVE-2026-80977.html * https://www.suse.com/security/cve/CVE-2026-89528.html * https://www.suse.com/security/cve/CVE-2026-89542.html * https://www.suse.com/security/cve/CVE-2026-89669.html * https://www.suse.com/security/cve/CVE-2026-90011.html * https://www.suse.com/security/cve/CVE-2026-90088.html * https://www.suse.com/security/cve/CVE-2026-97555.html * https://www.suse.com/security/cve/CVE-2026-97564.html * https://www.suse.com/security/cve/CVE-2026-98015.html * https://www.suse.com/security/cve/CVE-2026-98016.html * https://www.suse.com/security/cve/CVE-2026-98041.html * https://www.suse.com/security/cve/CVE-2026-98130.html * https://www.suse.com/security/cve/CVE-2026-98248.html * https://www.suse.com/security/cve/CVE-2026-98253.html * https://www.suse.com/security/cve/CVE-2026-98260.html * https://www.suse.com/security/cve/CVE-2026-98323.html * https://www.suse.com/security/cve/CVE-2026-98357.html * https://www.suse.com/security/cve/CVE-2026-98359.html * https://www.suse.com/security/cve/CVE-2026-98432.html * https://www.suse.com/security/cve/CVE-2026-99999.html * https://bugzilla.suse.com/show_bug.cgi?id=1275510 * https://bugzilla.suse.com/show_bug.cgi?id=1275564 * https://bugzilla.suse.com/show_bug.cgi?id=1276951 * https://bugzilla.suse.com/show_bug.cgi?id=1277357 * https://bugzilla.suse.com/show_bug.cgi?id=1277599 * https://bugzilla.suse.com/show_bug.cgi?id=1277742 * https://bugzilla.suse.com/show_bug.cgi?id=1277821 * https://bugzilla.suse.com/show_bug.cgi?id=1280251 * https://bugzilla.suse.com/show_bug.cgi?id=1280259 * https://bugzilla.suse.com/show_bug.cgi?id=1280387 * https://bugzilla.suse.com/show_bug.cgi?id=1280743 * https://bugzilla.suse.com/show_bug.cgi?id=1281280 * https://bugzilla.suse.com/show_bug.cgi?id=1281397 * https://bugzilla.suse.com/show_bug.cgi?id=1283835 * https://bugzilla.suse.com/show_bug.cgi?id=1283851 * https://bugzilla.suse.com/show_bug.cgi?id=1283894 * https://bugzilla.suse.com/show_bug.cgi?id=1283946 * https://bugzilla.suse.com/show_bug.cgi?id=1283963 * https://bugzilla.suse.com/show_bug.cgi?id=1284064 * https://bugzilla.suse.com/show_bug.cgi?id=1284408 * https://bugzilla.suse.com/show_bug.cgi?id=1284518 * https://bugzilla.suse.com/show_bug.cgi?id=1284713 * https://bugzilla.suse.com/show_bug.cgi?id=1284746 * https://bugzilla.suse.com/show_bug.cgi?id=1284790 * https://bugzilla.suse.com/show_bug.cgi?id=1284791 * https://bugzilla.suse.com/show_bug.cgi?id=1285684 * https://bugzilla.suse.com/show_bug.cgi?id=1285685 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:30:35 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 08:30:35 -0000 Subject: SUSE-SU-2026:4946-1: important: Security update for python311 Message-ID: <179334903554.17944.17366952373420949233@8cb11e3fd1c0> # Security update for python311 Announcement ID: SUSE-SU-2026:4946-1 Release Date: 2026-10-29T19:05:19Z Rating: important References: * bsc#1267974 * bsc#1276223 * bsc#1276226 * bsc#1276227 * bsc#1277111 * bsc#1280459 * bsc#1283826 * bsc#1283969 * bsc#1285433 Cross-References: * CVE-2026-15310 * CVE-2026-15806 * CVE-2026-17084 * CVE-2026-19445 * CVE-2026-19553 * CVE-2026-19672 * CVE-2026-82049 * CVE-2026-9669 CVSS scores: * CVE-2026-15310 ( SUSE ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L * CVE-2026-15310 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-15806 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2026-15806 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-17084 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-17084 ( NVD ): 6.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19445 ( SUSE ): 8.3 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-19445 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-19445 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19553 ( SUSE ): 7.6 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-19553 ( SUSE ): 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-19553 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-19672 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-19672 ( NVD ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-82049 ( SUSE ): 8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-82049 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-82049 ( NVD ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-9669 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-9669 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-9669 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * Basesystem Module 15-SP7 * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves eight vulnerabilities and has one security fix can now be installed. ## Description: This update for python311 fixes the following issues: * CVE-2026-9669: crafted input can cause a stack buffer overflow (bsc#1267974). * CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression (bsc#1277111). * CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL scheme sent over another scheme (bsc#1276223). * CVE-2026-17084: StringPrep algorithm considered Unicode codepoint attributes outside Unicode 3.2.0 (bsc#1276226). * CVE-2026-19445: reassigned SNI callbacks with unreferenced SSLContext instances can cause use-after-free (bsc#1283969). * CVE-2026-19553: omitted server_hostname arguments in wrap_bio() can cause silent hostname verification bypasses (bsc#1283826). * CVE-2026-19672: tarfile extraction filter bypass allows creation of directories outside the destination (bsc#1276227). * CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure (bsc#1280459). Changes for python311: * Update to version 3.11.17. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4946 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4946 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4946 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4946 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4946 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * python311-testsuite-debuginfo-3.11.17-150600.3.74.1 * python311-doc-devhelp-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-testsuite-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-doc-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (x86_64) * python311-base-32bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-32bit-debuginfo-3.11.17-150600.3.74.1 * python311-32bit-3.11.17-150600.3.74.1 * python311-base-32bit-3.11.17-150600.3.74.1 * libpython3_11-1_0-32bit-3.11.17-150600.3.74.1 * python311-32bit-debuginfo-3.11.17-150600.3.74.1 * openSUSE Leap 15.6 (aarch64_ilp32) * python311-64bit-3.11.17-150600.3.74.1 * python311-base-64bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-64bit-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-64bit-3.11.17-150600.3.74.1 * python311-64bit-debuginfo-3.11.17-150600.3.74.1 * python311-base-64bit-3.11.17-150600.3.74.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * Python 3 Module 15-SP7 (aarch64 ppc64le s390x x86_64) * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * python311-base-3.11.17-150600.3.74.1 * libpython3_11-1_0-debuginfo-3.11.17-150600.3.74.1 * python311-dbm-debuginfo-3.11.17-150600.3.74.1 * python311-curses-3.11.17-150600.3.74.1 * python311-tk-debuginfo-3.11.17-150600.3.74.1 * python311-debuginfo-3.11.17-150600.3.74.1 * python311-idle-3.11.17-150600.3.74.1 * python311-base-debuginfo-3.11.17-150600.3.74.1 * python311-core-debugsource-3.11.17-150600.3.74.1 * python311-dbm-3.11.17-150600.3.74.1 * python311-tk-3.11.17-150600.3.74.1 * python311-curses-debuginfo-3.11.17-150600.3.74.1 * libpython3_11-1_0-3.11.17-150600.3.74.1 * python311-3.11.17-150600.3.74.1 * python311-devel-3.11.17-150600.3.74.1 * python311-tools-3.11.17-150600.3.74.1 * python311-debugsource-3.11.17-150600.3.74.1 ## References: * https://www.suse.com/security/cve/CVE-2026-15310.html * https://www.suse.com/security/cve/CVE-2026-15806.html * https://www.suse.com/security/cve/CVE-2026-17084.html * https://www.suse.com/security/cve/CVE-2026-19445.html * https://www.suse.com/security/cve/CVE-2026-19553.html * https://www.suse.com/security/cve/CVE-2026-19672.html * https://www.suse.com/security/cve/CVE-2026-82049.html * https://www.suse.com/security/cve/CVE-2026-9669.html * https://bugzilla.suse.com/show_bug.cgi?id=1267974 * https://bugzilla.suse.com/show_bug.cgi?id=1276223 * https://bugzilla.suse.com/show_bug.cgi?id=1276226 * https://bugzilla.suse.com/show_bug.cgi?id=1276227 * https://bugzilla.suse.com/show_bug.cgi?id=1277111 * https://bugzilla.suse.com/show_bug.cgi?id=1280459 * https://bugzilla.suse.com/show_bug.cgi?id=1283826 * https://bugzilla.suse.com/show_bug.cgi?id=1283969 * https://bugzilla.suse.com/show_bug.cgi?id=1285433 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:30:42 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 08:30:42 -0000 Subject: SUSE-SU-2026:4945-1: important: Security update for brotli Message-ID: <179334904227.17944.12253465155892022433@8cb11e3fd1c0> # Security update for brotli Announcement ID: SUSE-SU-2026:4945-1 Release Date: 2026-10-29T16:31:59Z Rating: important References: * bsc#1287778 Cross-References: * CVE-2026-111497 CVSS scores: * CVE-2026-111497 ( SUSE ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-111497 ( NVD ): 9.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-111497 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for brotli fixes the following issue: * CVE-2026-111497: Brotli decoder out-of-bounds write permits remote code execution (bsc#1287778). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4945 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4945 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4945 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4945 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4945 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4945 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4945 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4945 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4945 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-4945 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4945 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4945 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4945 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4945 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * Basesystem Module 15-SP7 (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libbrotlidec1-debuginfo-1.0.7-150200.3.8.1 * brotli-debuginfo-1.0.7-150200.3.8.1 * brotli-debugsource-1.0.7-150200.3.8.1 * libbrotlicommon1-debuginfo-1.0.7-150200.3.8.1 * libbrotlienc1-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-1.0.7-150200.3.8.1 * libbrotlicommon1-1.0.7-150200.3.8.1 * libbrotlienc1-1.0.7-150200.3.8.1 * libbrotli-devel-1.0.7-150200.3.8.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * libbrotlidec1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-debuginfo-1.0.7-150200.3.8.1 * libbrotlidec1-32bit-1.0.7-150200.3.8.1 * libbrotlicommon1-32bit-1.0.7-150200.3.8.1 ## References: * https://www.suse.com/security/cve/CVE-2026-111497.html * https://bugzilla.suse.com/show_bug.cgi?id=1287778 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 08:31:04 -0000 Subject: SUSE-SU-2026:4944-1: important: Security update for flatpak Message-ID: <179334906479.17944.17672876528334146786@8cb11e3fd1c0> # Security update for flatpak Announcement ID: SUSE-SU-2026:4944-1 Release Date: 2026-10-29T16:29:48Z Rating: important References: * bsc#1280236 * bsc#1282514 * bsc#1282515 * bsc#1282516 * bsc#1282518 * bsc#1282519 * bsc#1282520 * bsc#1282523 * bsc#1282524 * jsc#PED-17048 Cross-References: * CVE-2026-90616 * CVE-2026-92162 * CVE-2026-96275 * CVE-2026-96276 * CVE-2026-96280 * CVE-2026-96281 * CVE-2026-96282 * CVE-2026-96807 * CVE-2026-96808 CVSS scores: * CVE-2026-90616 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-90616 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-90616 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-92162 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-92162 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N * CVE-2026-92162 ( NVD ): 7.2 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-96275 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96275 ( SUSE ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96275 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96276 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96276 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N * CVE-2026-96276 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96280 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96280 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96280 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96281 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2026-96281 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2026-96281 ( NVD ): 6.2 CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H * CVE-2026-96282 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:L/SA:N * CVE-2026-96282 ( SUSE ): 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N * CVE-2026-96282 ( NVD ): 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N * CVE-2026-96807 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:L/SA:L * CVE-2026-96807 ( SUSE ): 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L * CVE-2026-96807 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L * CVE-2026-96808 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-96808 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-96808 ( NVD ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: * Desktop Applications Module 15-SP7 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves nine vulnerabilities and contains one feature can now be installed. ## Description: This update for flatpak fixes the following issues: * CVE-2026-90616: missing symlink protection allows a malicious sandboxed app to obtain arbitrary read and write access to files on the host (bsc#1280236). * CVE-2026-92162: path traversal via unvalidated `arch` parameter in `DeployAppstream` (bsc#1282514). * CVE-2026-96275: arbitrary write access as root via extra-data extraction (bsc#1282515). * CVE-2026-96276: arbitrary write in host context via `flatpak build-init` (bsc#1282516). * CVE-2026-96280: buffer overflow in OCI delta stream path names (bsc#1282518). * CVE-2026-96281: unprivileged active user can bypass anti-downgrade checks for system apps/runtimes (bsc#1282519). * CVE-2026-96282: extension metadata path traversal file existence oracle (bsc#1282520). * CVE-2026-96807: fixed-filename writes to arbitrary locations via symlink attack on `.ld.so` (bsc#1282523). * CVE-2026-96808: `revokefs` symlink path traversal allows local privilege escalation via commit tampering (bsc#1282524). Changes for flatpak: * Update to version 1.16.6 (jsc#PED-17048): * Fix file descriptor leaks affecting Chromium-based browsers. * Fix installing extra-data without a runtime, including openh264. * Fix unusable sandbox-expose paths affecting Epiphany. * Fix installed tests and handling of file descriptor arguments. * Changes from version 1.16.5: * Fix regressions from the sandbox escape security fix affecting browsers, browser-based apps and Steam. * Expand test coverage of flatpak-run features used by the portal. * Changes from version 1.16.4: * Prevent arbitrary file reads in the system-helper context (GHSA-2fxp-43j9-pwvc). * Prevent orphaning cross-user pull operations (GHSA-89xm-3m96-w3jg). * Changes from version 1.16.3: * Be selective about mapping font-dirs.xml in flatpak build. * Changes from version 1.16.2: * Support reinstalling bundle installations and Intel Xe VA-API. * Add cancellation support for curl downloads. * Fix font configuration, mask and pin configuration reloads, unintended home directory access, flatpak kill, OCI support, memory leaks and crashes. * Changes from version 1.16.1: * Allow updating existing apps under parental controls by default. * Use instance IDs for systemd scopes and include /dev/udmabuf with --device=dri. * Speed up prune --dry-run and permission-reset. * Support TLS certificates in /etc/containers/certs.d for OCI. * Fix portal crashes, sandbox environment handling, accessibility bus discovery, error reporting and shell completion. * Update documentation and translations. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4944 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4944 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-4944 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4944 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ppc64le x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * openSUSE Leap 15.6 (aarch64 i586 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * openSUSE Leap 15.6 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * Desktop Applications Module 15-SP7 (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (aarch64 ppc64le s390x x86_64) * libflatpak0-debuginfo-1.16.6-150600.3.12.1 * flatpak-1.16.6-150600.3.12.1 * flatpak-debugsource-1.16.6-150600.3.12.1 * flatpak-devel-1.16.6-150600.3.12.1 * libflatpak0-1.16.6-150600.3.12.1 * typelib-1_0-Flatpak-1_0-1.16.6-150600.3.12.1 * flatpak-debuginfo-1.16.6-150600.3.12.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * system-user-flatpak-1.16.6-150600.3.12.1 * flatpak-zsh-completion-1.16.6-150600.3.12.1 * flatpak-remote-flathub-1.16.6-150600.3.12.1 ## References: * https://www.suse.com/security/cve/CVE-2026-90616.html * https://www.suse.com/security/cve/CVE-2026-92162.html * https://www.suse.com/security/cve/CVE-2026-96275.html * https://www.suse.com/security/cve/CVE-2026-96276.html * https://www.suse.com/security/cve/CVE-2026-96280.html * https://www.suse.com/security/cve/CVE-2026-96281.html * https://www.suse.com/security/cve/CVE-2026-96282.html * https://www.suse.com/security/cve/CVE-2026-96807.html * https://www.suse.com/security/cve/CVE-2026-96808.html * https://bugzilla.suse.com/show_bug.cgi?id=1280236 * https://bugzilla.suse.com/show_bug.cgi?id=1282514 * https://bugzilla.suse.com/show_bug.cgi?id=1282515 * https://bugzilla.suse.com/show_bug.cgi?id=1282516 * https://bugzilla.suse.com/show_bug.cgi?id=1282518 * https://bugzilla.suse.com/show_bug.cgi?id=1282519 * https://bugzilla.suse.com/show_bug.cgi?id=1282520 * https://bugzilla.suse.com/show_bug.cgi?id=1282523 * https://bugzilla.suse.com/show_bug.cgi?id=1282524 * https://jira.suse.com/browse/PED-17048 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:11 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 08:31:11 -0000 Subject: SUSE-SU-2026:4943-1: moderate: Security update for gnutls Message-ID: <179334907192.17944.6689608076099651369@8cb11e3fd1c0> # Security update for gnutls Announcement ID: SUSE-SU-2026:4943-1 Release Date: 2026-10-29T16:29:18Z Rating: moderate References: * bsc#1257960 Cross-References: * CVE-2025-14831 CVSS scores: * CVE-2025-14831 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-14831 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-14831 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves one vulnerability can now be installed. ## Description: This update for gnutls fixes the following issue: * CVE-2025-14831: excessive resource consumption when verifying specially crafted malicious certificates containing a large number of name constraints and subject alternative names (bsc#1257960). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4943 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * gnutls-debuginfo-3.3.27-3.24.1 * libgnutls28-debuginfo-3.3.27-3.24.1 * gnutls-debugsource-3.3.27-3.24.1 * libgnutls28-32bit-3.3.27-3.24.1 * libgnutls-openssl-devel-3.3.27-3.24.1 * libgnutls28-3.3.27-3.24.1 * libgnutls28-debuginfo-32bit-3.3.27-3.24.1 * libgnutls-devel-3.3.27-3.24.1 * libgnutls-openssl27-3.3.27-3.24.1 * libgnutlsxx-devel-3.3.27-3.24.1 * libgnutls-openssl27-debuginfo-3.3.27-3.24.1 * gnutls-3.3.27-3.24.1 ## References: * https://www.suse.com/security/cve/CVE-2025-14831.html * https://bugzilla.suse.com/show_bug.cgi?id=1257960 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 08:31:23 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 08:31:23 -0000 Subject: SUSE-SU-2026:4942-1: important: Security update for xen Message-ID: <179334908390.17944.10365867538310995125@8cb11e3fd1c0> # Security update for xen Announcement ID: SUSE-SU-2026:4942-1 Release Date: 2026-10-29T16:29:03Z Rating: important References: * bsc#1283317 * bsc#1283321 * bsc#1283322 * bsc#1283323 * bsc#1283325 Cross-References: * CVE-2026-102700 * CVE-2026-79608 * CVE-2026-79609 * CVE-2026-79610 * CVE-2026-79611 CVSS scores: * CVE-2026-102700 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102700 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102700 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79608 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-79608 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79608 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-79609 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79609 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79609 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( SUSE ): 9.3 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-79610 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79610 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-79611 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-79611 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-79611 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves five vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround (bsc#1283317). * CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). * CVE-2026-79610: grant-table: double version change race (bsc#1283322). * CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). * CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-4942 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-4942 ## Package List: * Basesystem Module 15-SP7 (x86_64) * xen-tools-domU-debuginfo-4.20.4_06-150700.3.49.2 * xen-tools-domU-4.20.4_06-150700.3.49.2 * xen-debugsource-4.20.4_06-150700.3.49.2 * xen-libs-4.20.4_06-150700.3.49.2 * xen-libs-debuginfo-4.20.4_06-150700.3.49.2 * Server Applications Module 15-SP7 (x86_64) * xen-4.20.4_06-150700.3.49.2 * xen-debugsource-4.20.4_06-150700.3.49.2 * xen-devel-4.20.4_06-150700.3.49.2 * xen-tools-4.20.4_06-150700.3.49.2 * xen-tools-debuginfo-4.20.4_06-150700.3.49.2 * Server Applications Module 15-SP7 (noarch) * xen-tools-xendomains-wait-disk-4.20.4_06-150700.3.49.2 ## References: * https://www.suse.com/security/cve/CVE-2026-102700.html * https://www.suse.com/security/cve/CVE-2026-79608.html * https://www.suse.com/security/cve/CVE-2026-79609.html * https://www.suse.com/security/cve/CVE-2026-79610.html * https://www.suse.com/security/cve/CVE-2026-79611.html * https://bugzilla.suse.com/show_bug.cgi?id=1283317 * https://bugzilla.suse.com/show_bug.cgi?id=1283321 * https://bugzilla.suse.com/show_bug.cgi?id=1283322 * https://bugzilla.suse.com/show_bug.cgi?id=1283323 * https://bugzilla.suse.com/show_bug.cgi?id=1283325 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:19 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 16:30:19 -0000 Subject: SUSE-SU-2026:24460-1: important: Security update for expat Message-ID: <179337781929.19946.9418802879454735398@3c67540d6a94> # Security update for expat Announcement ID: SUSE-SU-2026:24460-1 Release Date: 2026-10-27T16:06:39Z Rating: important References: * bsc#1275115 * bsc#1282347 * bsc#1283493 * bsc#1284334 * jsc#PED-16154 Cross-References: * CVE-2026-102633 * CVE-2026-32776 * CVE-2026-32777 * CVE-2026-32778 * CVE-2026-56403 * CVE-2026-56404 * CVE-2026-56405 * CVE-2026-77214 * CVE-2026-93990 CVSS scores: * CVE-2026-102633 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-102633 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-102633 ( NVD ): 8.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-102633 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32776 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32776 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32776 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32777 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32777 ( NVD ): 4.0 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32777 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-32778 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-32778 ( NVD ): 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-32778 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-56403 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56403 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56404 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( SUSE ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-56405 ( NVD ): 6.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L * CVE-2026-77214 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-77214 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H * CVE-2026-77214 ( NVD ): 8.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-77214 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L * CVE-2026-93990 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2026-93990 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-93990 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves nine vulnerabilities and contains one feature can now be installed. ## Description: This update for expat fixes the following issues: * CVE-2026-77214: out-of-bounds read due to insufficient checks in `XML_ParseBuffer()` (bsc#1284334). * CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (bsc#1282347). * CVE-2026-102633: denial of service via integer overflow in expat_realloc (bsc#1283493). Changes for expat: Update to 2.8.5 (jsc#PED-16154): * Bug fixes: * Fix an OOM-related memory leak on a failed overflow check * Fix memory alignment for architectures with 128bit pointers * Mark XML_SetHashSalt deprecated ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1996 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * expat-debugsource-2.8.5-160000.1.1 * libexpat1-debuginfo-2.8.5-160000.1.1 * libexpat1-2.8.5-160000.1.1 * expat-debuginfo-2.8.5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-102633.html * https://www.suse.com/security/cve/CVE-2026-32776.html * https://www.suse.com/security/cve/CVE-2026-32777.html * https://www.suse.com/security/cve/CVE-2026-32778.html * https://www.suse.com/security/cve/CVE-2026-56403.html * https://www.suse.com/security/cve/CVE-2026-56404.html * https://www.suse.com/security/cve/CVE-2026-56405.html * https://www.suse.com/security/cve/CVE-2026-77214.html * https://www.suse.com/security/cve/CVE-2026-93990.html * https://bugzilla.suse.com/show_bug.cgi?id=1275115 * https://bugzilla.suse.com/show_bug.cgi?id=1282347 * https://bugzilla.suse.com/show_bug.cgi?id=1283493 * https://bugzilla.suse.com/show_bug.cgi?id=1284334 * https://jira.suse.com/browse/PED-16154 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:43 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 16:30:43 -0000 Subject: SUSE-SU-2026:4950-1: important: Security update for suseconnect-ng Message-ID: <179337784356.19946.8304206806354901966@3c67540d6a94> # Security update for suseconnect-ng Announcement ID: SUSE-SU-2026:4950-1 Release Date: 2026-10-30T11:20:20Z Rating: important References: Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that can now be installed. ## Description: This update for suseconnect-ng rebuilds it against the current go security release. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4950 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4950 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4950 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4950 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4950 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-4950 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4950 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-4950 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4950 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ppc64le x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (aarch64 x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * mcp-server-suseconnect-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro 5.3 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Micro 5.4 (aarch64 s390x x86_64) * suseconnect-ng-1.23.0-150400.3.57.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (aarch64 ppc64le s390x x86_64) * suseconnect-ruby-bindings-1.23.0-150400.3.57.1 * libsuseconnect-1.23.0-150400.3.57.1 * suseconnect-ng-1.23.0-150400.3.57.1 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:30:52 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 16:30:52 -0000 Subject: SUSE-SU-2026:4949-1: important: Security update for python-CairoSVG Message-ID: <179337785265.19946.17109980044608393181@3c67540d6a94> # Security update for python-CairoSVG Announcement ID: SUSE-SU-2026:4949-1 Release Date: 2026-10-30T09:58:04Z Rating: important References: * bsc#1284832 Cross-References: * CVE-2026-107378 CVSS scores: * CVE-2026-107378 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-107378 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-107378 ( NVD ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Leap 15.4 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for python-CairoSVG fixes the following issue: * CVE-2026-107378: rendering an attacker-controlled SVG with a path containing many segments can lead to quadratic CPU consumption (bsc#1284832). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4949 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4949 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4949 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-4949 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4949 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4949 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4949 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4949 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4949 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4949 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4949 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4949 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * openSUSE Leap 15.4 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * Python 3 Module 15-SP7 (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-CairoSVG-2.7.1-150400.9.9.1 ## References: * https://www.suse.com/security/cve/CVE-2026-107378.html * https://bugzilla.suse.com/show_bug.cgi?id=1284832 -------------- next part -------------- An HTML attachment was scrubbed... URL: From null at suse.de Fri Oct 30 16:31:04 2026 From: null at suse.de (SLE-SECURITY-UPDATES) Date: Fri, 30 Oct 2026 16:31:04 -0000 Subject: SUSE-SU-2026:4948-1: important: Security update for python-urllib3_1 Message-ID: <179337786489.19946.15675214750831800762@3c67540d6a94> # Security update for python-urllib3_1 Announcement ID: SUSE-SU-2026:4948-1 Release Date: 2026-10-30T09:56:02Z Rating: important References: * bsc#1283908 * bsc#1283909 * bsc#1283910 Cross-References: * CVE-2026-97687 * CVE-2026-97688 * CVE-2026-97689 CVSS scores: * CVE-2026-97687 ( SUSE ): 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N * CVE-2026-97687 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2026-97687 ( NVD ): 7.6 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97687 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N * CVE-2026-97688 ( SUSE ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-97688 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97688 ( NVD ): 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97688 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2026-97689 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-97689 ( NVD ): 8.9 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-97689 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * Python 3 Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves three vulnerabilities can now be installed. ## Description: This update for python-urllib3_1 fixes the following issues: * CVE-2026-97687: traffic interception due to possible HTTPS proxy TLS configuration override (bsc#1283908). * CVE-2026-97688: denial of service due to infinite loop during chunked Deflate decoding (bsc#1283909). * CVE-2026-97689: denial of service due to unbounded memory allocation in chunk parser (bsc#1283910). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4948 * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-4948 * Python 3 Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Python3-15-SP7-2026-4948 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4948 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * openSUSE Leap 15.6 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * Python 3 Module 15-SP7 (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * python311-urllib3_1-1.26.18-150600.3.14.1 ## References: * https://www.suse.com/security/cve/CVE-2026-97687.html * https://www.suse.com/security/cve/CVE-2026-97688.html * https://www.suse.com/security/cve/CVE-2026-97689.html * https://bugzilla.suse.com/show_bug.cgi?id=1283908 * https://bugzilla.suse.com/show_bug.cgi?id=1283909 * https://bugzilla.suse.com/show_bug.cgi?id=1283910 -------------- next part -------------- An HTML attachment was scrubbed... URL: